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Impllcathwa.  IDA  flaporta  ari  ravlawad  by  autalda  panalo  of  oiporto  ta  onoutt  Ihoir  high 
quality  and  mlavanca  ta  tho  prablama  atudlad,  and  they  am  ralaaaad  by  the  Pmoidant  ol  IDA. 

Papers 

Papara  normally  addraoa  mlathraly  molrlctad  technical  or  policy  laouao.  They  communicate 
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Memorandum  Reports 

IDA  Mamorandum  Raparto  ara  uoad  lor  tho  eonvanlanca  at  the  aponoora  or  the  analyato  to 
racard  oubotantiva  work  dona  In  quick  raactlon  otedlaa  and  major  interactiva  tathnical  oupporl 
acthrltioo;  to  make  avallabla  pralimlnary  and  tantetlva  raoulto  ol  analyaao  or  ol  working 
group  and  panol  actlvltioo;  to  forward  inlormatian  that  la  aoaantlally  unanalytad  and  unaval- 
ualod:  or  ta  maka  a  racard  ol  eonlarancao,  maatinga,  or  brialingo,  or  ol  date  davnlapad  In 
tea  couroo  al  an  invaotigatlon.  Ravlaw  al  Mamorandum  Raparto  Ic  aulted  to  tbair  contant 
and  intendad  uaa. 

Tho  raoulto  ol  IDA  work  ara  aioa  canvayad  by  brtaltnga  and  inlormal  mamaranda  to  oponaaro 
and  Qtharo  daolgnatad  by  tea  iponaoro,  whan  appropriate. 


Tha  work  raportad  In  tela  dacumani  woo  eonductad  under  contract  MDA  903  B4  C  0031  lor 
tho  Dapartmanl  ol  Oolanoa.  Tha  publlcalian  at  tela  IDA  dacumant  daao  not  Indicate  andaria- 
monl  by  tea  Doparimam  ol  Dafanon,  nor  ohauld  tha  cantanta  ba  canatruad  aa  raflacOng  tha 
oWclal  poaltlon  al  teat  agancy. 


Thio  Mamorandum  Raport  la  publlohad  in  ordar  to  mako  available  tea  material  It  cantaino 
lor  tea  uaa  and  eonvanlanca  al  Intaraotad  partiaa.  Tha  material  haa  not  nacaooarlly  boon 
compiataiy  avalaatad  and  anatynd,  nor  oubfactad  to  IDA  ravlaw. 
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Preface 

The  purpose  of  IDA  Memorandum  Report  M-308.  Proceedings  of  the  Strategic 
Initiative  Organization  (SDIO)  Tool  Fair,  Is  to  make  available  Information 
provided  to  IDA  by  the  SDIO  Tool  Fair  participants.  This  Information  was 
used  during  the  selection  process  which  lead  to  the  Tool  Fair. 

The  Importance  of  this  document  Is  based  on  fulfilling  the  objective  of  Ta.sk 
Order  MD.\903  8-J  C  0031:  T-R5-d2*2.  SDIO  Software  Technology  Int^gratlou 
Plan,  which  Is  to  "generate  a  list  of  software  environments/tools  to  be 
acquired  and  evaluated."  M-308  will  be  used  as  a  starting  point  In  the 
formal  evaluation  of  "off  the  shelf  products  that  support  the  development, 
generation,  simulation,  or  evaluation  of  systems  described  In  the  .\da  pro¬ 
gramming  language  and  S.-V/PDL.  an  Ada-based  Process  Description  Language. 
As  a  memorandum  Report.  M-308  Is  directed  towards  the  SDIO  Program 
ornce. 
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Introduction 


This  document  contains  responses  by  Strategic  Defense  Initiative  Organization 
(SDIO)  Tool  Fair  participants  to  questions  posed  by  The  Institute  for  Defense 
Analyses  (IDA). 


ID.-\  received  a  request  from  the  SDIO  to  review  Automated  System  Design 
Languages/Methodologles  (SDLs).  The  goal  was  to  evaluate  these  products  and 
iletermlne  their  applicability  to  the  task  of  specifying  system  and  BM/C3 
architectures. 

A  T('k>1  Fair  was  organized  to  familiarize  ID.\.  SDIO.  SDIO  contractors,  and 
other  Interested  parties  with  the  tools  and  environments  currently  available. 

To  generate  a  list  of  products  for  participation  In  the  Tool  Fair.  ID.\ 
published  a  Sources  Sought  announcement  In  the  Commerce  Business  Dally 
(CBD)  on  .November  11.  1986.  (.-V  copy  of  that  announcement  appears  on 

the  following  page.)  number  of  responses  to  the  CBD  announcement  were 
received,  and  from  those  a  group  of  tools  was  .selected  for  Inclusion  In  the 
>DIO  Tool  Fair  held  .January  26-27.  1987.  IDA  recognizes  that  (1)  not  ovei-y 
tool  vendor  was  aware  of  the  CBD  announcement.  Tints.  It  Is  po.sslble  that 
some  very  good  twls  were  not  represented  at  the  Tool  Fair,  and  (2)  the 
selection  of  participants  In  the  Tool  Fair  was  based  entirely  on  Information 
lu-ovlded  to  ID.\  by  the  Uxal  vendors. 

The  next  step  In  this  evaluation  of  tools  and  environments  for  the  .SDIO  Is  a 
more  thorough  and  formal  anal.v.sis  of  not  only  the  products  represented  at 
the  Tfxd  Fair.  Imt  also  any  applicable  tools  and  environments  that  may  have 
been  overlexjked  during  the  preliminary  evaluation. 


Institute  for  Defense  Analyses 
1801  X.  Beattregard  street 
Alexandria.  \'A  2i;311 

ATTX:  Deborah  bleystek 

SDl  SYSTEM  DESIGN  TOOL  F.UR 

The  Strategic  Defense  Initiative  Organization  (SDIO)  has  specified  an  .Ada 
Process  Description  Language  (PDL)  as  a  required  formal  presentation  for 
descriptions  of  system  and  BM/C.3  architectures.  This  PDL  Is  to  provide  the 
basis  for  design  renuement  and  enhancement  --  a  typical  role  for  existing 
Program  Design  Languages.  It  Is  also,  however,  to  be  used  to  produce  input 
to  system  and  sulisysteni  simulations  In  an  automated  manner. 

The  PDL  is  a  rei)r'‘sentatlon  formalism  only.  It  htis  an  advantage  in  that  It 
does  not  require  the  use  of  any  specillc  design  methodology.  It  has  disad¬ 
vantages  In  that  It  Is  not  "user  friendly"  (for  non-.Ada  programmers)  and 
since  it  Is  methodology  Independent,  does  not  provide  a  variety  of  tools  to 
a.ssist  in  producing  and  visualizing  designs. 

The  8DIO  is  interested  in  identifying  and  evaluating  "higher  level"  System 
Desi'jn  languages/Methodologies  (.SDLs).  It  Is  undertaking  this  effort  as  an 
Initial  step  to  deciding  <mi  the  utility  of  specifying  a  standard  SDL  or  of 
establishing  retiulrements  for  SDLs  without  specifying  a  single  formalism.  To 
this  p;id.  it  is  requesting  organizations  that  have  developed  an  appropriate 
(see  below)  automated  system  de.slgn  language/methodology  to  provide 
Information  about  this  language/methodology  to  the  SDIO.  It  Is  planned  that 
the  developers  of  SDLs  that  are  .ludged  to  Ite  of  potential  Interest  to  the 
SDIO  will  be  Invited  to  make  a  prc.scntaMon  in  mid  December  to  describe, 
analyze,  and  document  a  sample  proposed  SDI  architecture  component. 

Organizations  should  submit  a  "Fact  Sheet"  of  no  more  titan  -1  pages  to 
describe  tlie  characteristics  of  their  .SDL.  Supplementary  materials  (e.g.. 
including  manuals,  description  of  formal  languages)  are  welcome,  but  tiie  Fad 
sheer  must  l)e  seir-i-omnined. 

'rill."  fad  sheet  musi  "pedfy  the  sysKaiis  ability  to 

1.  Prcxliiee  Ada  PDL  a.s  outi)ul 

2.  Pepre^ent  large  (o\'er  i().(K)()  com|)onents)  systems 

3.  Peiiff'seni  bot  it  logical  and  physical  s\'stems 
I.  .Accept  graphical  Itipnl  and  matiiiuilatlon  atid 

Pun  on  a  \\idel\-  available  operatitig  "\’stem. 

Pl.ijiiied  future  e;ip;ii,iijt  ie-  inic-i  be  d  I  ffe  fc  1 1 1 1  ,a  I  cd  from  current  system 

e:i  pa  Milt  Ic". 


CADRIO  'I’ccluiologles,  Inc. 


1.  Describe  bow  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

'rcaniwoi'k  iM‘o\-Mes  sfanantlr  and  syntactic  error  checking,  inconsistency 
c-hecklng  and  I'losiire  on  analysis  ai^l  design  models. 

2.  What  type  of  progress  metric  do<;s  the  system  produce?  Is  It  quantlfl- 
able  measure  of  completeness? 

■[''■aiiiW' 'I'k  allou''  ilm  ii'-er  lo  capture  progress  metrics  during  all  phases  of  a 
|,iMjiMt.  It  does  tills  in  two  main  ways;  hy  maintaining  versions  and  status 
iiilt  iatiatloii  o.n  ■airh  oPjeet  that  is  eiliied. 

ToaiuNvork  mainiaiu''  'ttitus  litrormai ioit  of  all  itiodel  diagratits  lU'eated  itt  the 
'■'.'lein.  'This  litrormatK'tt  itichtdes  who  chatiged  what  object  attd  when  it  was 
.■liaii'O'd.  'I’liere  ]s  :i|s()  n  jilace  for  the  itscr  to  atttiotate  each  object  to 
eijuure  the  pricj.re-s  ;i.s  -^een  by  the  itser.  .\  stattts  report  tool  Is  pro\’lded 

iivi  I  111-  iiiroritiaiioti  for  all  objects  in  a  glvett  imxlel. 

sixif.'ii  \  ersiotis  .,>r  e;ich  olijeet  I  httt  Is  (Milted  are  tnaitit alticd  li,\'  'rmttitwork. 
’I'll.,  numlier  ca'  versions  of  att  obj(M,-t  can  be  considered  a  progress  tiietric. 
Al'o.  usiii'j,  'reamuork/.\cc('ss  itsers  can  extract  tirntty  itsel’ul  tnettics  that  arf.' 
eapiuriMl  as  a  natural  b\'-pro(|uct  of  itsitig  the  tool.  Itiillcatlotis  oit  size  attd 

roinpicviiy  .  .f  models  afe  ea.slly  obtaiiKMl.  Mea.stires  of  cotniilctetiess  of  a 
in.  .lie]  ai'o  also  ea.s\  to  obtaltt  (le.l  how  tnati\'  I’ttttcl limits  have  a.ssochitial  data 
dietloiiary  oi'  specs  that  httv**  been  (jertned.  'I'hese  hidlcators  catt  be  useful 
ill  lotiuiatli'n  aeti'.liies  or  a.s  progri'ss  Itidicalors. 

(  i.lr..  iia.s  pm  liana  Metric-  hooks  ittto  'reaitiwork  for  itsers  interestcal  In 
|,  .,|<iim  at  I'eiaiUe  ei,iuple\it  a.s  a  preillctU'e  aid.  (d'K'.  in  the  1  1\.  is 
■iirr'iit !'.  im .  rf-ielna  their  (d-'.COMO  (CoCoMoi  tool  to  teatttwork  usitia  i  lie 
a-k  ■  \.'ee.--  rai-llii  ies. 

Describe  how  your  .sysUmi  support, .s  documentation,  progrant  manageimmt 
and  control. 

\[;al\-i-  aad  d.-ivll  tU'i|e|.-.  and  i'afls  of  these  lllOilels.  call  be  pl-]uled 

I'"' 'la  T'  a  i  11 '  .I’l.. .  I'rititer-  >  .f  lj(,th  dol-itialrlx  and  la.ser  birmais  ai'i' 

-  i  ]  1 , 1  1  '  It;,  \~iriu.  'I',  aiiia'  rk  i|se^  I  *ovt  ...(U'!  pi  and  INirU’l-.ss  lorniats 

;■  I-  .  l  ii.-I  and  bitiirips.  Diagrams  attd  le\l  I'l’ealed  ill  lealliWol'k  are 

:•  .1111.'  a’ ai  ii  pr'p.'irai  f  iti  paeku'cea.  Tea  m  a  oik  eiiri'eiiifv 


::tU'rr;u't‘s  to  tlii'ce  poimhu-  ptirktisies.  Interlenfs  'I’l’S  mid  WPS. 

I  Miti-xt's  PCX',  and  l'iillo>^U-X  Scrilif.  Mnii.v  'I’caiiiwork  userid  arc  currciitl.v 
M-'iU'j;  these  raeilUles  to  ea-sli.v  orcaie  l)C)i;)-S'r[)-21(>7  or  similar  dociimeius. 

Diam'ams  and  text  ereatt'il  In  leaniwork  are  also  eiusHy  liudnded  In  conneiira- 
lion  inanayement  systems,  such  a.s  DSPIx  (.\pollo).  C'.MS  (PIxC  ).  and  S(  (  s 
'(  ,\fX).  lo  raeilltat('  pro.icet.  mana-yetuenf  atid  eontroi.  Teamwork  eustome|-s 
ar  tminy  ttiest‘  tixils  to  13a.se-llne  spei's  and  desh^ns  and  maintain  reititial 
'ssu'i-.'  eolle  files. 


1.  Di'scrlbe  how  your  system  supports  real  time  design. 

l''amuerk  PT  pro\'hles  eoin|ilete  aniomale<|  support  of  the  Pear  Selylei'/I ’o''- 
:;iu  real-time  analysis  met  hodoloity.  'I'liis  met liorlolo'yy  semantlcall.\'  coniblncs 
flail’’  --tate  machine  modeling  (showlne,  the  eontroi  aspects  ol'  a  system)  with 
lata  flow  ilia'Jtratn  modeUmi;  (showim;  the  processlm^  and  data  flow  a.speets  <3 
■1  '\’'iem.  iisltca  the  ^■onrdon/l.)('.\  larco  met  luMlolouty  1.  provldlie^  two  separaii' 
lap  pee.’ssar.c  '.IfW'.s  of  tile  sysicm  under  an:il>sls.  'I'he  d'eamwork  Heal  'llnu’ 

eaiai’iliP'.  is  rnll.\'  inte<ii’:ued  with  'reainwork's  analysis  and  design  tools  ;ind 
■il-. .  pro'clde  exten'-i\’i'  aiinimaied  cheekimj;  raeiUtles. 

5.  Describe  how  your  system  supports  concurrency,  parallelism. 

T!ie  I’eamwork/H'r  met  luxioloy.v  lias  the  eaptibllliy  of  showing  eoncuriami  .as 
'A ”11  a.’'  parallel  systt’iiis  iliromih  the  use-  of  Process  .\etlvat,lon  tables.  State 
d’ra ii'ii ion  Diagrams,  ami  state  l-iceni  imitriees.  ^fhese  dlai^rams  sliow  t  lu' 
P’.iiamie  exeeiitlon  of  sy''tems  ami  can  niodi’l  coneitrrent  task  Insttintiatlons. 

().  Is  your  system  constraitied  to  a  particular  Implementation  laiiRuaKO  (Ada)? 

('.■•iiiPAeii't:  is  not  eonxt  rained  to  a  partlenlar  implement  a,tion  laii'iimiye.  H  is 
pill”  'Piinbl”  for  Ada. 

7.  I)(K'S  you  system  produce  Ada  PDIP 

\.|:i  PDI.  '’all  b”  -emaiii ieally  hudmied  mid  relatcil  to  diayranis  in  mial\'sis 
:i!;  1  i'”'icn  mo'd”!’'  'Aliei'e  a  p| ’I'opria  I  e.  Specirie  tc'pe  ilennltioiis  ran  be 
liii’”’'  ]”,]  ill  d:il:i  .|”l1nill!)||s  .-rialed  in  the  Mo<lnle  speclfleal  lot  W  Inside 


S 

i  ^ 


8.  Describe  how  your  system  supports  life  cycle  Intraphase  &.  luterphase 
com  munlcatlons. 

Coininiiiiicnrion:  Teamwork  takes  full  advantage  of  workstation 
technology,  'reainwork  provides  concurrency  control  for  the  project  databa.se. 
that  allows  multiple  iisf-rs  (^each  on  their  own  workstation)  to  effectively  share 
the  ■'anie  pr(\ji'ct  data  lia.se. 

Till'  ‘  iiables  -;e\ei-al  users  to  work  In  parallel  on  'fleshing  out'  system 
'iMM-incatlous  without  danger  or  corrupting  each  others  work.  Team  members 
.•an  ''ce'  othei's  wdi’k  as  it  progresses  and  can  check  for  consistency,  either 
tlieir  own  uurk  onl\'.  or  across  the  whole  model  a.s  It  Is  built.  In  addition 
I  he  pi'ojeci  <latalia.s(‘  can  lie  located  anywhere  within  the  network  and  may 
■d'O  be  located  on  large  backend  servers  (such  its  large  \'.'\Xes)  for  effective 
-iippori  ('f  large  de\elopment  teams  without  sacrinclng  the  |)ower  and 
l>i'rl'ormam'e  of  dedlcateil  workstations. 

('oinmuaIc:}rh>ii:  AW  'reainwork  ttxds  share  a  common  project  data 
i  a.'-’.  s  \  -iiaiciui'ed  analysis.  K'F  real  time  analysis.  l.\l  Information  modeling, 
and  s|)  'inictiired  design.  This  allow's  for  very  effective  transitions  across 
anal,'.'!'  and  design  phases  cjf  the  itroject.  For  the  pha.ses  of  tlie  life  cych' 
ii(.i  dii'ecil\-  aupporttai  (ly  Teamwork,  the  Team work/.-Vccess  (irodnct  can  he 
u.'.'d  to  extract  information  from  the  teamwork  project  data  ba.se  and 
'■'unmunicate  ilnit  informtttion  to  other  tcxtls.  .-Vs  Imllcated  earlier  'I'eamwork 
lias  'uccc"fully  ticeii  Integrated  with  (jocument  itroduction  tools,  code 
detelopmeni  and  anal\'ls  t(X)ls.  counguimlion  manageintmt  tcxds  ami  project 
management  ttxds. 

i).  Is  your  .system  automated,  executable,  compilable? 

Aui,. mat'd  -  Teamwork  is  ati  tuttomated  system  for  prodttcltig  ati:\l,\'sls  attd 
.i'-'icn  '[-ecificiitioii''.  The  i(x)|s  .aiitontate  the  entry,  editing,  storage  attd 
|■i•(ri'■\al  '  f  ri’laird  diagrams  attd  text-  that  comprise  system  tttodels.  These 
mod'  1'  cull  be  tli'iiighl  of  as  "compilable"  for  the  tnttomatlc  semanil''. 

.yiiiacilc  and  co.nsisi  ericy  (dicck’s  that  can  be  nm.  In  additloti  portlotis  of 
model'  that  contain  cotnpilabic  code  or  i)sciido-code  (c.g..  .Ada  or  Ada  1*1)1.) 
■ir*-  !■' I  rl'wablc  tliroiigh  icatn work/.Acct'ss.  and  directly  compilable. 


10.  Describe  the  graphics  support  for  your  system. 

Teamwork  uses  iiigh-resolutlon  bit-niapped  displays  with  a  inenii-diixen 
Interface.  The  menus  are  context-specinc.  and  are  In  both  pull-dcavn  and 

foi-mats.  Dot-matrix  and  la.ser  printers  output  formats  are  su|)|)orte(l 
Uirough  the  use  of  Postscript  and  IMPRESS  standard  print  languages. 

11.  Describe  how  your  system  supports  concepts  of: 

-fOarly  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-I'ackaging  concept 

-Abstraction 

-'Imping 

-lOvolutionary  development 

-Generics 

-Macros 

-Data  flows 

-(Control  flows 

Prototyping  P  a  way  to  ciulckly  assess  the  correctness  t.'f  system  re(|uiremems 
or  dr'sign  decisions,  by  Implementing  a  portion  of  the  system  and  e\-aliiatlng 
its  performance  or  correct ne.ss.  Teamwork  supports  protoi \’pli)g  by  facilli atliig 
the  |■■ntry  and  checking  of  partial  models,  'riils  supports  itroioiyplng.  becausi' 

I  Ilf  n.>f|-  doesn't  liave  to  complete  the  model  -  he  can  itike  pieces  of  model 
dtjwn  u.)  execntaiile  code.  The  Teamwork  consistency  checker  ensures  that 
Hie  pU'ce  of  the  model  is  semantically  and  syntactically  coi'rt'ct. 

''t  imct  iired  analysis  and  design  technUiucs  by  themselves  gi'catly  faciliiaie  the 
creation  of  ''■oftware  systems  that  lend  t lit'm.selvos  to  |•fMlsabil)l y.  li  is  also 
liosi-ilile  (villi  Teani'vork/.Xecess’)  to  link  executable  rode  wiili  aiialxsis  and 
ie-icii  1  liagi-am"-.  Py  maintaining  ibis  linkage  to  luiekend  librarian  or 
f aidgurm ion  management  ■^ysimns  users  can  greatly  inert'ase  uoi  'mix'  the 
■levlcn  Inn  apo  the  maintenance  of  rensai'le  code. 
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The  metluxloloeiles  supported  by  Teamwork,  descrllied  elsewhei-e.  dli-ecily 
.sup{)orr  analysis  and  desli^n  al')stracllon. 


Typing  larormatlon  ran  be  ei^lly  Incduded  In  Teamwork  data  dennlllons.  and 
easily  extracted  with  Teainwork/Access. 

Teamwork  supports  evolutionary  development  lor  both  Individual  dlagi’am  and 
text  objects,  a-s  well  :vs  life  cycle  evolution.  Sixteen  vei-slons  of  each  dlagrmu 
and  text  object  are  maintained  automatically  by  Teamwork,  allowing  the 
evolutionary  development  of  these  objects.  The  shared  common  data  base 
between  all  I'eamwork  i)roducts  allows  the  evolutionary  life  cycle  development 
from  Analysis  to  Design  to  proceed  wU)i(>ut  the  need  for  re-keylng  the 
Intorm  atlon. 

(lenerlcs  are  supported  through  the  use  of  the  Inlbrinatlon  hiding  and  the 
abstraction  of  data  and  i>rocesses.  .-Vlso.  Structure  Chart  diagrams  In 
Teamwork/SD  can  be  enhanced  with  annotations  to  show  generics. 

The  Structure  Chart  of  'roainvvork/SD  has  :i  macro  module  '^\inbol  tlmt  the 
consistency  checker  understands. 

'I'he  ^'ourd(n^/De.\larco  structured  analysis  methodology  sni)porled  by  'Peam- 
work  Includes  data  flows. 

The  Lear  Slegler/Waial  ,C  Mellor  real-time  analysis  methodology  supported  b\ 
teamwork  Includes  control  flows. 

12.  Is  there  a  paradigm  embedded  in  your  system?  If  .so,  describe  it 
brletly. 

'I'eamwca-k  has  embedded  in  it  ktiowledge  of  Chen  entity-relationship  diagrams 
for  Information  modeling,  the  'I'our'lon/De.Marco  struct  urt'd  Anal,\sls  methodol- 
ug;, .  the  ^■ourllon/Cwnstalttlne/Page-.)otles  Structured  PDesign  methodology,  and 
the  Lear  Slegler/W'aial  .t,"  .\Ie|lor  Heal-'Plme  .Analysis  met  hodolog,\'. 

Till'  knowledge  is  eml)edd('(l  in  the  laiiguage-sensll l\'e  graphic  eirnors,  ns  well 
as  the  consisrenc.\'  cliecker.  Sitice  checking  is  onl,\'  performed  on  dem.and.  i  he 
u-^er  nmy  dep.ari  from  these  iiaradlgms  if  he  so  (diooses. 


13.  Describe  the  external  t(X)ls  with  which  your  system  Interfaces  (tool 
compatibility). 


Teamwork  objects  can  be  retrieved  in  an  ASCII  format  with  the  Team¬ 
work/Access  tool,  and  hence  be  interfaced  wlMi  any  tool  that  understands 
ASCII.  Teamwork  Invs  already  been  lntei;rated  with  documentation  systems. 
Ai,la  rlevelopment  s\'siems.  project  manatteinenL  systems,  and  conlTgiiratlon 
management  systems. 

Interfaces  Itave  been  built  for  tin'  following;  t(x)ls: 

-TPS/WPS  from  Interleaf 
-Scribe  fronit  CniUv^lc 
-DOC  frcmi  Context 

-RlOOO  Development  environment  from  Rational 
-DSKE  conn.Ltnration  ina.na'j:enient  tool  from  Ajtollo  . 

i  t.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottorns-up,  both,  etc.),  architectural  perspectives  (deslKiier 
creativity)  and  object-oriented  design. 

Tlie  ’I'ourdon/DeMarco  structured  Analysis  metlio<lolojiy  automated  by 
'reamwork/SA  sui)|)orts  hierarchicttl  decomitosUlon  and  flow  direction.  In 
Tetitnwork.  the  user  is  not  forced  to  take  any  speclHc  approach,  such  as 
topdown.  He  can  start  anywhere  In  tin*  model  that  makes  sense  and 
proceed  from  there.  The  s.vstein  understanils  floxs'  direction  (as  well  as  flow 
( leconi  posit  Ion ).  and  the  consistency  checker  c:m  ensure  that  Input  and  out|)Ut 
flows  balance  across  let'cls  of  the  hi('rarch\’.  'feamwoi'k  also  has  a  "collapse 
function  that  allows  for  ea.s\'  repartioninc;  of  kwcis  of  diat^rams. 

DeslLtiier  ci'cat  l\’if  x'  Is  supporti'd  I  hrointh  the  user  intc'i'face  and  xu'rslonin'j; 
|■apablHtl(■s  of  'I'eamwork.  'The  'graphics  .are  done  on  a  hish-rf'solul Ion 
lilr-mapped  display,  with  \’cr.v  I'a.st  response  time  for  the  creation  ;md  eilHln'j, 
i.f  dia<j;i-anis  and  text.  'I'his  fo^-iers  rlesi'a,ner  creaiudiy  throu'j;h  exploraior,\' 
aiiaU'sis  :.ind  <lesic,ii.  It  reduces  opeiaiior  faihaue.  and  the  desi”;n<“r  is  less 
likel\-  i(.)  lose  a  train  of  thoU'j:lii  wliile  w.aitiiej;  for  .a  slou-respontllnrt  msIciii. 
The  \  e|-sl(  .nina  capablUi  y  <>l'  Teamwork  makes  it  easy  to  (lr:iw  diagrams 
1 1  era  1 1\ (■!> .  and  e\aluat(  iheiii  as  i  he  design  is  htdii'i;  built.  It  Is  eas,\’  l(' 
re.iraw  and  re-e(rii  dbcArams  and  levi. 


15.  Is  your  system  supported  by  Formal  syntax  &  semantics?  Describe 
briefly. 

The  system  is  supported  tyv  formal  syntax  and  semantics.  See  ciuestlon  1. 

16.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  iLSlng, 
training,  &  maintaining  It). 

I Inrilwnrr  costs  Workstation  prices  can  vary  based  on  vendor  or  \'oluinc 
discounts,  use  $15K  iier  workstation  as  an  averttge  price  today.  We  expect 
prices  to  contitiuo  to  iIcclitK'  to  well  ladow  tills  average  withlti  the  87 
rimel'ramf'. 

S(d'nia/-e  costs  8t(jK  list  price  [>er  single  scat  of  Teamwork,  vohttne  dis¬ 
counts  atid  site  llcetises  are  available,  large  customers  averagt'  ittidcr  $l()lv  per 
'-eat  for  'I'eatiiwork  llcetises. 

77vi//t//ig  costs  A  I'atige  of  training  Is  available.  Charges  var\'  ba.sed  on  type 
of  traitiitig.  (  out act  Cadre  with  speclllc  needs. 

.\ l:iinfrii;inci<  cosf.s  $12‘'7  ammally.  hardware  and  software. 

17.  Indlcjile  the  hostablllty  (measure  of  degree  of  portability)  of  your 
systetrt. 

'I'eatiiwork  is  implemented  in  C  a-iid  has  proven  to  be  portable  across  a  wide 
range  of  workstation  platforms.  'I'eaniwork  is  currently  available  on  the 
following  hardware  platforms: 

Aiiollo  lAll  models,  under  Aegis  or  Doimilii/l\) 
situ  (All  models,  under  I 'nix  l.•_V•l!) 

1)|'.(  (All  X'AXstatloiis.  under  \MS) 

HIM  (l’(  -irr.  mider  AL\-CNdX) 

I  (cwicit-l'ackaril  (<KH)(1  series,  under  ilP-CXIX') 


18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/represen- 
tatlons  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

The  structured  analysis  methodology  supported  by  Teamwork  Is  not  speclHc 
In  the  ahstractlons/representatlons  that  can  be  described.  In  terms  of 
modeling  software,  hardware,  or  people.  The  methodology  provides  a 
universal  abstraction,  showing  transformations  on  data,  without  caring  what 
the  data  is. 

19.  I  l(w  complete  Is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
'A  project  control  methodology 
-A  management  rnethcxlology 
-All  of  the  above 

The  Teamwork  product  litte  sui)ports  standard  methodologies  where  nitproprl- 
air.  Tlif  standard  methodologies  that  Cadre  has  adapted  Idr  analysis, 
n'al'iime  analysis,  and  design  (described  above)  describe,  in  an  unambigiioir^ 
grapliiral  language,  tinalysls  and  design  speclHcatlons.  Beyond  that,  the 
'rcamwork  idtllosophy  Is  to  provide  a  general  purpose  tool,  and  not  to 
rcsrrict  an  oi'ganization’s  development  methodology,  and  to  support  a  variety 
of  approatdics.  d'enmwork  allows  the  adoption  to  other,  non-snpported  formal 
^ti'iictun-d  analysis  and  stimcturcd  design  methodologies.  Rigor  Is  maintained 
by  consistency  checking  and  syntactic  analysis. 

'I’l’amwork  is  flexible  enough  (through  teamwork/Access)  to  allow  cotnmunlca- 
ilon  with  pro.lect  control  and  project  management  methodologies  without 
forcing  any  spccillc  ones. 

20.  De.serlbe  how  your  .sy.stern  .supports  a  team  development  approach. 
(Number  of  .stations/ users). 

'i'camwork  lu'ovldcs  shared  access  :icross  a  network 'to  the  project  ilatji  ba.se. 

It  maiiiiaiiis  coiiciiri'ency  tind  locking  for  nmitlide  users  sharing  the  same  dat: 
base.  The  iiumbei-  oi'  Stations/users  ls_  a.  limitation  of  the  hardware  platform 
anil  opi'icilina  system,  not  the  'reamwork  software'. 


21.  Describe  how  your  system  supports  design  trade-offs. 


Designer  creativity  Is  supported  through  the  user  Interface  and  versioning 
capabilities  of  Teamwork.  The  graphics  are  done  on  a  hlgh-resolutlon 
hit-mapped  display,  with  very  hist  response  time  for  the  creation  and  editing 
of  diagrams  and  text.  This  fosters  designer  creativity  through  exploratory 
analysis  and  design.  The  versioning  capability  of  Teamwork  makes  It  easy  to 
craw  diagrams  Iteratively,  and  evaluate  them  as  the  design  Is  being  bitllt.  It 
is  ea.sy  to  redraw  and  re-edit  diagrams  and  text. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

The  range  of  prolilems  to  which  Teamwork  can  be  applied  Include;  embed¬ 
ded  systems,  real-time  itrocess  control,  information  processing. 

23.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  major 
users  of  your  system. 

Mr.  (-Iar.\'  De  Ciregorio 
.Motorola 

La.'^l  .MgoiKiulu  Kd. 

Schamburg.  IL-  (iOlPb 

Mr.  Dob  Liston 
Lngiiieei-iiig  Manager 
IT  )eing 

I’.o.  Box  --my.) 

"cattle.  \\'.\  ns  12  I 


.Mr.  Dull  Bawl 

Manager  of  Software  l)ev<-lopmem 
I.c:ir  Sicg||.|- 

Mr.  Tom  \\ea\au- 
McDoimcll  Dougla."^ 

Nuclear  'recluiolog.N'  Brograius 
Am  roiimitir^  Do’Dioii 
"t.  1,  /Uis.  .Nl"  (i.'lltih 
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1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

The  Systems  Engineering  approach,  together  with  the  concept  of  using  an 
automated  paradigm  (he.,  that  detlned  by  Balzer.  Cheatham  and  Green. 

Kestrel  Institute),  dictates  that  automated  tools  be  employed  early  In  the  life 
cycle  (during  the  retiulrements  and  design  phases)  to  maintain  control  and 
discipline  on  design  rather  than  on  the  code  and  programming  plnise.  The 
formal  synta.\  of  the  lnput/Out[)ut  Requirements  Language  (lORJ^).  a  systems 
design  language,  enables  an  automated  compilation  and  analysis  activity  to  be 
performed  early  on  the  ensuing  preliminary  design  prloi’  to  Implementation, 
design  Hnallzatlon  and  code  commitment.  This  automated  compilation  and 
analysis  activity  enables  early  detection  of  errors  In  a  cost  effective  manner 
prior  to  commitment  of  long-term  critical  re.sources.  This  approach  thus 
enables  closure,  consistency  and  completeness  checks  on  the  design. 

2.  What  type  of  progress  metric  dtxts  the  systetu  produce?  Is  it  qiiantin- 
able  measure  of  completeness? 

Once  a  design  is  synthesized  using  fORL.  speclHc  and  accurate  t  l■a,l^sfor/natioll 
ratios  exist  that  enable  the  estimation  of  lORL  design  pages  IVom  retiuire- 
ments  speclllcatlon  pages  and  subsequently  to  pages  of  software  code  design. 

A  correlation  can  be  made  from  .A  t.vpe.  B  type  and  C  type  specincatlons 
(he.,  from  reciulrements/performance  specincatlons  to  fnnctlonal/allocated  design 
specincatlons  to  product  specincatlons).  Present  data  available  Is  consistent 
with  and  supp(;rts  the  ratios  tised  for  cost  estimation  relative  to  design  ami 
fode. 


2.  Describe  how  your  system  supports  documentation,  program  management 
and  control. 

t  sing  d'AfiS  technology  itiltially  durlttg  system  deslgti  provides  aittottiatlc 
ilocutnetitation  cmddlng  Integrity  atid  visibility  of  dcslgti  by  both  tcchtiical 
and  nianagetnetit  cointnunities.  Tlu'  cotitrol  ;ui<l  ittiUptc  data  luise  used  to 
access  1  ti fortti ;it l< )n  b\'  dfwelopnnuit  teatn  tnembers  also  ensurt's  that  itil'orma- 
tioti  [ja.ssed  to  other  prograiti  managemetit  t(K)ls  exterttal  to  TAGS  (e.g.. 
I’RtoMlS  (I’ROMIS  ]s  a  registered  tradetnark).  ;i  I’(  ba.seil  program  manage¬ 
ment  sfu  of  i(X)ls.  resldetit  as  cotnpllmetitary  api)llcatlotis  software)  Is  also 
colislsteiil  mid  com|i|('te. 


‘1.  Describe  bow  your  system  supports  real  Lime  design. 


See  answer  to  question  5. 

5.  Describe  bow  your  system  supports  concurrency,  parallelism. 

The  rornial  syntax  of  the  systems  design  language  (SDL)  -  lORL.  enables  It 
to  precisely'  and  accurately  support  (1)  real-time  design.  (2)  concurrency  and 
(3)  parallelism  either  Independently  or  Jointly  as  Is  commonly  found  In 
systems  that  contain  functions  supporting  .sensor  processing,  command  ami 
control,  detection  anti  Idem mcntUni.  process  control,  network  routing  and 
control.  F’rocesslng  symbols  such  a.s  fan-ln-AND.  fan-out-AND.  fan-in-OH. 
fau-out-OR.  the  C(3nti'olled-A.\T)  symbols,  also  part  of  lORL.  support  1.  2  and 
3  above.  The  conti-olled-AXD  symbol  Is  also  used  to  support  the  real-world 
computer  Interrupt,  where  parallel  lu’ocessors  are  operating,  performing 
independent  functions  (jr  operations. 

(>.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

TACits  technology'  permits  designs  developed  to  be  Implemented  in  any 
language  (e.g..  f'OR'rRA.N.  P.VSCAL.  C  or  Ada).  However.  It  Is  focitsetl  on 
Ada  and  Its  automatic  generation  becau.se  of  the  beneHts  to  be  acciated  In 
communicating  Information  between  hardware  design  (using  Ada  based  \’11DI,) 
and  software  design  (itsing  Ada  as  both  an  implementation  language  and  a 
PDL).  and  acros  various  life-cycle  pha.ses  (e.g.,  code  and  preliminary  design 
I'hase). 


7.  D(x;s  you  system  prcxluco  Ada  PDL? 

't'es.  .\da  PDL  (similar  to  that  denned  by  the  IEEE  .\da  PDL  Ciuldelines  ami 
ID.\  Paper  P-l!)83)  Is  produceil:  however,  the  lack  of  unlfoian  and  well 
dPtlnei!  PDL  standards  in  the  workplace  retiulres  ftirther  dialogue  within  the 
present  .Vila  ant!  non-.Vda  user  community.  The  .-Vda  produced  Ity  d’.-VClS  is 
fully  coiupaMhle  and  compllaiit  wltli  MIL-S'l'D-lSl-h.-V.  the  Ada  Language 
l?efercnce  .Manual.  I'dirt  liermore.  tlie  involvement  of  the  professional  stan¬ 
dards  i)rgauizatioiis.  '^uch  a.s  IIH-IE.  a.s  well  tvs  DoD.  will  he  retiuircd  to  clearly 
deriiic  the  specincs  of  \\'li:u  nu  aecc'iu able  or  usable  .Vda  PDI,  is  to  embody. 
The  SDl  Ad:i  Process  laescrl pi ioii  Language  document  proposed  represiaits  a 
\  l:iblc  not cw on  by  Initiative. 


»  -I.' 


8.  Describe  how  your  system  supports  life  cycle  Intraphase  &  Intcrphase 
communications. 

I'he  fact  that  TAGS  technology  can  be  used  In  the  requirements,  design, 
'■(nllng.  testing  and  maintenance  phases  of  the  life-cycle  clearly  enables 
interplmse  communications.  TAGS  ability  to  support  preliminary,  formal  and 
'•ritlcnl  design  activities  enables  viable  Intraphase  support,  for  example. 

t).  Is  your  system  automated,  executable,  compilable? 

The  automated  nature  of  TAGS  applications  software  packages  on  an 
engineering  workstation  enables  executable  and  compilable  tasks  to  be  effected, 
speeincallx.  the  diagnostic  analyses,  for  example,  enables  automatic  compilation 
of  the  resulting  design  for  com[)leteness.  closure  and  consistency  executable  In 
a  real-time  imtde  or  in  a  background  mode. 

H).  Describe  the  graphics  support  for  your  system. 

TA(  is  technology  contains  strong  components  Intended  to  a.s.slsr  the  user  in 
\isuaHzlng  such  design  concepts  as  parallelism  and  concurrency.  The  lORL 
design  '-iX'ml'olog.v  graphics.  Intended  to  assist  in  the  synthesis  of  design  and 
architecture,  are  a  pan  of  the  formal  .syntax  that  is  executed  and  complied. 
The  ICON'S  and  keyboard  aids  presented  on  the  screen  during  the  edit  mode 
are  imendetl  to  a.sslst  the  user  In  capturing  design  embellishment  rapidly  and 
effecrUely.  The  electronic  mouse.  electronic:\ily  displayed  switches  -and 
multiple  windowing  capabllUy  are  intended  to  I'acilitatc  access,  review  and 
edit  functions  In  a  timely  ntanner. 

II.  Describe  how  your  system  supports  concepts  of: 

-lOarly  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-I’ackaglng  concept 

-Abstraction 

-'I'yplng 

-(Jcnerlcs 

-[evolutionary  development 
-Macros 
-Data  flows 
-Goritrol  flows 
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'I'hf  TAGS  siamlatlcMi  ronipiler  enables  tlie  i^eneratlon  of  both  early  and 
i-:i['id  [irorotypes.  Initial  designs  can  be  rapidly  protolypetl  by  Identifying 
macro  or  generalized  timing  reciulrements.  .As  design  and  timing  rennements 
are  made  or  sul'seciuently  established  and  Ulentined.  a  more  complete  higher 
conndence  level  prototype  can  be  generated. 

'I'lic  'I'AGS  Schematic  Block  Diagrams  (SBDs)  support  both  Information  hiding 
and  the  packaging  concept  as  IdentlHed  In  .V1IL-STD-1815.\  by  enabling  the 
Identiricatlon  and  Isolation  of  Independent  packages  and  processes.  Once 
the>e  entitles  are  Identined.  they  can  then  be  subseciuently  embellished  upon 
at  a  later  time  but  within  the  Cfmtext  of  the  characteristics  or  itarameters 
lnitlall\'  esinbllshed.  If  known.  SBDs  enable  the  identincatlon  and  comimrt- 
mentalizatlon  of  fiinct lonallty  at  one  level,  while  the  related  Implementation 
and  elaboration  can  be  affected  Independently  and  subseciuently  at  a  lower 
le\fl  b.v  another  Individual. 

The  hleiaarchli-al  relmlonships  and  nature'  of  lOtil.  su[)i)orts  tlie  various  levels 
and  concept  of  abstraction  reciuired  to  represent  and  manage  design  and 
'ofiware.  The  different  parameter  tables  contained  within  the  language  (l.e.. 
lOl’TS.  (B'rs.  PPT's).  provide  the  capability  to  deHne  various  data  types, 
denial's.  St Wetors.  .Matrices.  l,oglcals  and  sets  are  a  partial  list  of 
i.vpes  that  can  tie  represented.  These  lORL  features.  SBDs.  parameter  tables 
predeniii'd  proces'^f's  and  others  al.so  support  tht'  dennltlon  and  declaration  of 
geiierlci'  a.'  ueil.  (See  the  lORP  language  roferetice  manual  for  further 
"laboratlou). 

TAGS  technology  Is  particularly  effective  Iti  supiiortltig  evolutionary  dt'velop- 
meni  by  provldltig  tlu'  caiiabllity  to  coe.vlst  with  <llffer('ul.  Itntnature  atul 
Iti -omplete  design  baselines.  'I'lie  t(K)l  suite  provides  the  capability  to 
Individually  customize  ami  cotiiplete  subsystetiis  and  eotnptmetils  without 
I'erturbing  er)nipiered  desigti  tnodules.  'I'he  eonngttratloti  tnatitigemetii 
a pplleat lotis  package  enables  the  tntilntetiattce  atid  integrlt\-  of  muHliile  system 
baselines  and  Iterations.  Tratisit loning  fortn  one  design  btisellne  to  atiother  Is 
racilil  ated. 

An<ahir  oT  the  l(;PI.  formally  ilefuied  symbols  is  the  Macro.  It  shows  all  ol' 
the  |■undaule:il  al  Input /oiti  put  events  or  r('|ir('settts  a  comblnaliou  of  fitmla- 
uiental  IT)  events  delltteil  liv  a  sii|o;|,.  input  or  oittptti  s.vntbol.  B\  cotidt'tts- 
:!ic  1,T)  ithTnttatioii  in  this  mantier.  the  atnoitiit  of  detail  itt  a  diagratti  or 
le-lcti  i'  fediteed  "1 '1 1 1 1  ft ea tt I  l.v  altd  becotltes  titofe  tita ttageal tie.  Macros  are 
U'ei|  priiuaril,'.  to  fepre'-eni  the  eontpleie  t  |•atlstltisslott  of  data,  frotti  ittillailott 
r  ef,,|it  ,,'I  l.i  iwecii  two  'ide-.  of  ail  Interfaee  to  aeeeptailee  of  the  data 
fe'^i'.eip  Tic'.  Ilia;,  iiielude  till-  liiii'  pr''i()Co|  imeil  ill  I  raiismit  t  lug  the  data. 

'  ’i).  |()|,’I,  lalicuam  llialiilal  f' .f  rurl  Iter  elaboration  1. 
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Thf  schematic  block  diagrams  of  lORL  enable  a  precise,  formal,  complete  ami 
lamii'ilable  representation  of  data  flows  with  associated  functionality  and 
architectural  representations.  The  SBDs  also  Include  all  Internal  and  exteimal 
data  and  parameter  pa.sslng  with  the  associated  structure.  Another  compil¬ 
able  representation,  the  data  structured  diagram  (DSD)  provides  a  graphic 
representation  of  system  data.  The  tabular  DSD  describes  physical  data 
or'aanlzatlon  and  storage  allocation.  The  form  DSD  speclHes  a  menu  or 
report  format  (l.e..  a  grapihlcal  format  statement).  The  picture  DSD  dlsi)lays 
a  drawing  a.s  a  reflection  of  data  functions.  These  features  also  allow  the 
geiuu'atlon  of  an  automatic  data  dictionary. 

The  Input /(>m  pul  Relatlonahlp  and  'I'lmlng  Diagram  (lOliTD).  a  part  of  t  he 
fonnal  -^ymax.  is  iiscil  to  rei'resent  overall  control  flow  for  a.ssoclated  data 
floiW  diagrams.  'PAds  allows  Immediate  and  automatic  access  anti  comiiarisou 
.  f  all  ■'.t'tiun  data  and  control  fk'-ws  to  provide  design  visibility. 

12.  Is  there  a  paradigm  embedded  in  your  system?  If  so,  describe  It 
briefly. 

Th''  Haba  r.  (  hi  at  ham.  and  (.ireen  automated  parmllgms  as  described  in 
('omput(T,  NoMunber  i<)s3,  [Rl-;tr  pidillcatlon.  are  embodied  within  dWCiS 
I ■•'■hm  logy  as  uell  a.s  'I'HIbs  own.  These  paradlgnts  stress  early  detection  of 
pfo'l ill  Ills  (i.o..  Ill  the  reiiulremenis  and  design  phtuses).  and  the  ai)ilit.\'  to 
goiieraie  iiigh  coundeuce  protot,v|)es  via  automated  t(X)ls  coupled  with 
I  rot' it >1"  and  ilevhgu  repeat atiillty  for  consistency.  'I'hese  itaradlgms  stress 
if  eiiiueutatloii  (  f  devigii  a.'  :i  natural  b.v-prodiict  to  enaltlo  design  and 
reiiuii'oimmt-  iiiaiiiienance  versus  the  present  da.\'  approach  to  sy- 'ems 
!•  \  ol' 'ptm-nt  ol'  ode  maiiitenatiee.  The  latter  Is  mideslrable  beeause  of  its 
iuiior'Uir  •liarai-tei'i'-i]c  to  destroy  structure  and  insiglit  as  a  futietlon  of 
iiialui  eiiaiieo  and  time. 

rie-o  pai'adigiu'  aNo  enable  ela-osical  ami  (Wolut.lomiry  development  to  roexioi 
'.'.Pli  pi'i  it' it \piirg  iultiati\oo  iiiai  provide  yvnergism  within  the  life-eye|e.  enable 
li'or  iia  I'l  Iw  ai'e;  or.i’i  w  ai'o  i  radeoffs.  and  red  itce  •  t  he  amount  of  time  (l.e..  Iife- 
i'li  I'-i  luifi  ■’ 1  for  oV'ti'iii  1^0111/ a  I  ion. 

12.  Describe  the  external  L<x)ls  with  which  your  .system  liiterfaet's  (Ux)l 
eomptitibility ). 


\  [.uuimr  ’Xl 'lUial  toi.p  ll.e..  developed  b.V  other  vetidofsl  can  be 
'il’i  '  1  'li'l  1 1 1 '  igra  I  ei  1  '.silli  the  T,\t  iS  tool  ^upe.  A  poslserlpl  Inlerfaee 
:  '[III  .all  lir'-.uly  iiii'rfaee  wit  It  ■-mdi  looK  a.s  ilie  MeniiU'  (■rapbie'' 

<  a;:  aa,  <  .uri--.!.  rim  M II  ,-''TI )- I  s  |  .',A  I.amguage  IP  ferem'i  Maiiiial 
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:\t llit'i'f’i  1  to  sliall  ooik’  proiliicnl  by  I'ACiS  U)  liP  coinptitH'lc  witli  any 

oUinr  Alta  DoD  validated  software  developiiient  environment.  A  nmidicr  (d' 
■other  proprietary  'I'ACi^s  products  arc  imminent  and  under  develoi)immt  that 
will  enable  :i  variety  of  other  tcxt)ls  to  be  directly  Interfaced  with  the 
appllcatk'iis  packaites.  Cnrrctit  efforts  are  underway  to  Intc.itrate  'I'.ACiS 
'ei'hnoloyy  with  speciric  i  eqtilrements  tools  of  N-AS'CEC  C'oritoration.  It  Is 
TBlf  pollc\'  to  Interface  with  existing  viable  tools  that  extend  'bAfiS  mUltari- 
an  vahif  and  i-'Xteasibirity  rather  than  build  Its  own.  This  policy  enables  t  he 
lompany  to  focus  on  unhuie  tool  development  activities  to  further  lncrea.se 
fiic  viability  of  TACiS  technology.  .Another  anticipated  sitindard.  to  enable 
fartlicr  tiM'l  cxi eiislbillty.  N  the  hardware  description  language  (X'llDL) 

im  i-i'facc  ''(inipletloii. 

11.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (top<Jown,  bottoms-up,  txith,  etc.),  architectural  perspectives  (designer 
creativity)  and  ob.lect-orietited  design. 

The  T.VtiS  hu'mal  dewdopment  met h<;dology  is  lva.se(l  on  sound  s\'stems 
•  iiainccring  i  I'incipics  that  can  be  idiaracteri'/ed  b\'  four  ba.slc  actU'liie^: 

-( 'uiicept  ually.atUin 
-1  lermltioii 
-Analysis 
All(  )catl(  ms 

The  iMieguage  enaldes  hierarchical  decompo-sltlon  and  i)rovlcU‘s  for  the  iiiiHal 
Ideii! it’catlon  of  a  s.'cstem  in  its  environment  with  all  associated  interface^ 

(  I ,  '..p-d',  'WII  !. 

llowrv,.,-,  since  'I'ACiS  technology  Is  Intended  to  in'ovlde  design  freedom  and 
iiiiio'- a;i\eiie''V  on  the  part  of  a  ilesigner  or  engineer,  lattuxil  departures  and  a 
t  ’  ■' t'  iio-iip  approach  are  not  precluded  'vhere  user  experienci'  and  experil-e 
an  oe  r''lied  upon.  Thus,  control  flows  at  ati.\'  level  can  be  uttdertaken 
oitp  denari  ures  into  the  world  of  dat;i  flows  or  \'lce-\-ersa  withoitt  ad\'ei'se 
I'aiital  ;  11'  ■ 'f  de'ieii  coiisei  |i|enc('S.  'The  techllolog.V  ettables  fit  ticl  lot  la  lit  >  to 
'  •■■'.'.'I  '.‘dull  ai'i  lib  ect  ural  represent  at  ions  and  design  formalisms  in  an  erni-icin 
nni  di'e.rao-d  manner. 

l.a.  Is  yf)ur  .system  .sn[)[)<)rte(l  by  formal  syntax  A,  semaiilies?  Dt'seribe 
briefly. 


re,  ;.  !,'a\  and  laiiouage  .-ndiedded  v.hliln  TA(  iS  ii  e|miTc.\  i'  il 
It’;:'  1  '  aiio  tiieiii  -  |  .ancuaee. 
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16.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

A  single  ami  complete  TAGS  stand-alone  node  (.sortvvare)  with  all  thirteen 
design  and  connguratlon  management  tools  costs  $16,250.  However.  Individual 
user  requirements  may  dictate  fewer  tools  that  can  range  from  a  lc)w  of 
$2.5(X}  to  a  high  of  $5,000.  Network  (S  nodes  or  more)  licenses  (luallfy  for 
discounts  of  up  to  50^T.  The  simulation  compiler  (prototypf'  generator  and 
timing  analyzer)  costs  $12. .500.  Training  Is  Included  with  the  puia-hase  of  a 

single  system  for  two  Individuals.  The  T.\G.S  comf)lete  and  basic  course  is 
10  hours  long. 

The  engineering  workstation,  an  Apollo  D.N'-3000  is  apiu’oxlmately  $10,000. 
Hardware  and  software  maintenance  for  a  single  node  Is  approximately  10^7 
of  purcha.se  price.  All  hardware  and  software  can  be  purchased  separately  or 
as  a  turn-ke.N'  s.vstem. 

17.  Indicate  the  hoetablllty  (measure  of  degree  of  portability)  of  your 
system. 

Tim  pi'esent  hosts  of  T.-VGS  technolog.v  are  the  Apollo  computers  and  the 
DIA.  \’AX  (VAX  Is  a  registered  trademark  of  the  Digital  Faiuliuncnt  Corpora- 
ri(.)n)  ■merles,  .\ddltlonal  hosting  Is  underway  and  will  be  made  available 
''Ub.iect  to  nondisclosure  agreements. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/represcn- 
tatlons  (l.c.,  systems  engineering,  software  engineering,  hardware  engineering). 

'Fhe  systems  engineering  methodology  embodied  within  T.\Gs  technology 
enables  It  to  also  sup[)ort  software  and  hardware  design  as  part  of  the 
natural  process  of  synthesis  retpilred  to  build  systems,  d'lius  'L'AGS 
I fclinology  and  t(X)ls  are  the  same  ones  used  to  su))port  the  hardware  and 
coftware  engineering  activities.  The  strength  of  the  approach  In  develoi)ing 
an  integrated  dc,  elopment  etivlronment.  Is  severalfold;  It  iiermits  viable 
liardw are/''Oft "'tux'  tradeciffs  and  liming  an;)l.\sis:  Insures  good  l•ommun)(■al!oIls. 
iufoi-uiatlon  exchange  and  consistent  documetit at ioti  between  hardware  atid 
-ol'tware:  fosters  uulfortu  training  and  tool  innovation  betw('eu  the  \arious  life 
e\ele  df'slgn  and  developmetit  meml)ers;  insures  contluueil  life-cycle  tool  usage 
I'rom  i-eqiiirements  and  design  through  test  and  nmintenauce. 
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19.  Mow  complete  Is  the  metho<lology  -  do  Its  principles  embody 


-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  metho<lology 
-A  management  methodology 
-All  of  the  above 

'rile  intent  (M'  TAGS  technology  Is  to  support  and  eniliody  all  of  the 
|■(‘lVl■enced  methodologies.  However.  It  is  recognized  that  to  have  a  coinidete 
methodology  that  accomplishes  all  Is  dimcnlt  and  does  not  currently  exist  in 
a  mature  and  well  documented  form.  Nonetheless.  Teledyne  Br<twn  Engineer¬ 
ing  feels  that  the  TACiS  technology  api)roach  taken  currently  satlsHes  several 
of  these  and  complements  a  number  of  others. 

The  lechucdogy  currently  provides  a  develoitment .  design  and  |)rogi’aminlng 
(partial)  methodology.  It  Is  also  coiniiatlble  with  sevei'al  structured  and 
object  oriented  approaches  (l.e..  enables  one  to  design  and  develop  with 
T\C(S  and  implement  code  traditionally  at  the  user's  discretion).  However. 
invocatUtn  of  automatic  code  generators  and  prototyiie  analyzers  can  lie 

to  emphasize  design  aretxs  previously  ignored  or  deempha.slzed  (e.g.. 
code  and  algorithm  optimization.  <leslgn  for  reusability  aprlorl). 

Presently  a  number  of  software  experts  at  .\uburn  Ludverslty.  .Jersey  City 
state  (  ollege.  anti  Georgia  Institute  of  Technology  are  presently  researching 
and  evaluation  innovative  programming  methodologies  and  T.AGS  in  their 
efforts  to  increase  .software  productivity. 

.\dditlon,ally.  ;i  number  of  companies  thtu  have  Integrated  T.\GS  into  their 
eiivironmeius  (i.e..  tis  the  basic  de.slgn  engine  ami  data  base)  are  develojiing 
(irojeci  control  and  man;)gement  components  in  ('fforts  to  establish  an  o\('rall 
methodology  that  satlsHes  the  crit.eria  for  completeness  and  extensiveness  of 
methodology.  Teledyne  Brown  Englnec-ring  Is  one  of  these  companh's.  By 
integrating  exiting  management  and  project  control  tools  with  i  he  prescmi 
T.\(..s  cn\iromnent.  'I'BE  feels  it  can  identify  an  existing  ('n\iroiimeni  that 
(•:ui  be  ii"-cd  lo  support  systems  of  the  magnitude  that  S'DIO  and  NASA  are 
uiiderr.afting.  These  iniegmied  "complete"  einironments  can  then  bi'  use(|  to 
i|e\e|(,|,  mofc  maiure  intelligent  and  eiihanee<l  tools. 


2().  Describe  bow  your  system  supports  a  team  development  approach. 
(Number  of  statlous/users). 


By  taking  adwantage  <d‘  the  networking  capabilities  offered  by  vendors  (e.g.. 
Apollo's  Domain  network  approach),  workstations  can  be  linked  together  to 
support  large  design  teams.  The  TAGS  technology  and  software  does  not 
contain  limitations  on  the  number  of  users.  Some  present  TAGS  users  have 
networks  in  excess  of  50  workstations.  Typical  network  rings  are  conngured 
in  multiples  of  eight  wcjrksiatlons.  individual  company  reciulrements  and  the 
need  for  >ensitive  comitartmented  information  have  been  found  to  dictate 
network  sizings  rather  than  technology  constralnt-s  at  this  time. 


21.  Describe  how  your  system  supports  design  trade-offs. 


See  (luestion  IS  resiionse. 


k 
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The  technology  with  the  simulation  compiler,  can  be  used  to  gener.aie 
protot\'pes  in  support  of  specinc  performance  requirements.  L.ess  than 
satisfactory  results  reciuire  only  that  the  user  isolate  modules  or  subsystems 
that  rec[ulr(*  fun  Iter  optimization  or  timing  changes.  Once  localized  chtmges 
are  made,  the  protot\-pe  can  then  Ite  simulated  again  and  new  output  data 
analyzed.  'I'he  latter  is  an  iterative  process  that  enables  tlimdy  :uid  efncleiit 
harrlware/software  tradeori's  to  l)e  effected. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  he  applied. 


'L'.VG.S  tecimulogx'  ha.s  been  etnployed  across  a  wide  range  of  s>’stems  and 
problems,  systems  that  include  electronic  warfare  sensors,  command  and 
control,  airci’aft.  (•(mimuuicai ions,  logistics  support,  process  control,  weapons 
ri-al-tlme  alg')rit  lims.  luaiiagement  iiiformatlon  systems.  Imnking.  architectural. 
DoD  and  iioii-Dol)  systems  have  Ix-en  designed  using  dWGS  teelmolog.w  The 
--x'stems  fugiiieeriug  a|iproacli  coutalued  wltliln  'I'.AGS  is  a  l)road-l)a.'^ed 
nmi  liodol()g\'  I  liai  can  be  :\|)i)lied  across  a  wide  range  of  problems.  Specinc 
TACiS  applii-aiioMs  of  interest  to  tlic  SDK)  ofllce  art'  tlie  Airbonie  Optical 
Adjimci  (AOA).  s:i((.|iitc  lut egrat ion  lOxperimcnt  (SlIO),  and  Xalloual  'I'esi  Bed 
(lh>i-kwc||  i,  :uu).  Sc\  eral  thousand  lOlih  design  pages  current  l\'  exist  on 
t  1 1  eve  ^V'-I  cni''. 
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23.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  major 
users  of  your  system. 

Eioelng  Aerospace  Company 
l(X)l  Southwest,  -list  Street 
Rejuon.  WA  98t)55 

Boeing  Aerospace 

P.O.  Box  39Q9 

Seattle.  WA  9612  1 

Boh  Welling  -  (206)  76l-060-( 

Sperry  Corporation 
Mail  Station  10-1 
Croat  Neck.  NA’  11020 
Charles  Pace  -  (516)  57-1-9261 

Siemens 
D  A1‘  52 
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Advanced  System  Architectures 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

Auto-G  supports  detection  of  Inconsistencies,  closure  and  errors  In  the 
following  ways: 

1.1  By  Visual  Inspection  Of  Auto-G  Documents. 

The  strict  forznallty  of  the  G/T  notation  guarantees  that  the  contents  of 
each  Auto-G  document  can  be  unambiguously  Interpreted.  If  system  I’equlre- 
ments  are  expressed  using  Auto-G.  the  risk  of  a  designer  misinterpreting 
these  requirements  Is  minimized;  If  a  system  design  Is  expressed  using 
.-Vuto-G,  the  functionality  is  immediately  visible.  Any  discrepancy  and 
Inconsistency  between  requirements  and  design  Is  therefore  Immediately 
apparent. 

1.2  By  Creating  Only  Syntactically  Correct  Documents. 

.-Vny  attempt  to  violate  the  syntax  rules  Is  an  indication  of  some  Inconsisten¬ 
cy.  Using  the  graphical  man-machine  Interface,  the  user  cannot  create 
Invalid  syntax;  using  Che  textual  Interface,  syntax  Is  checked  on  request,  azid 
Invalid  syntax  Is  not  stored  as  a  valid  document. 

1..3  By  Semantic  Checking. 

.\uto-G  Includes  an  automatic  checking  function  which  can  be  used  to  check 
the  validity  and  completeness  of  a  speclHcatlon  or  design  document.  This 
function  performs  a  series  of  semantic  checks  which  together  constitute  a 
complete  static  analysis:  when  the  checker  Is  run  it  produces  a  detailed 
report  on  all  functional  aspects  of  the  document{s)  being  checked. 

The  same  constructs  arc  used  l)olh  to  specify  and  to  design  the  system. 

The  checking  function  warns  of  any  redundancy  In  the  design  -  I.e.  whenever 
variables  are  not  accessed,  procedures  are  not  called,  variables  procedures  and 
templates  are  not  used.  Input  parameters  are  never  read  or  output  parame¬ 
ters  never  assigned  to.  In  addition,  the  checker  warns  of  possible  ca.ses  of 
unintended  Interference  between  functions  which  have  an  unspecined  seciuence 
of  execution. 


A  specification  Is  checked  to  ensure  that  there  are  no  loose  ends  -  he.  that 
all  the  Inputs  and  outputs  to  the  system  are  related  to  objects  In  Its 
environment. 

A  design  Is  also  checked  to  ensure  that  there  are  no  loose  ends  -  e.g.  that 
the  behavior  of  every  function  Is  consistent  with  Its  Interface  definition.  The 
checker  detects  any  processing  that  can  never  be  executed  because  In  practice 
It  Is  unreachable. 

.As  well  as  Its  semantic  checks,  the  checker  warns  of  the  use  of  any  legally 
valid  design  that  could  nonetheless  compromise  the  reliability  of  a  system  e.g. 
the  use  of  data  shared  by  concurrent  processes. 

1.-4  By  Dynamic  .Analysis  Llslng  .Auto-X. 

To  prove  the  completeness  of  a  requirement,  a  specification,  or  a  design.  It  Is 
not  siifHclent  merely  to  use  a  formal  structured  and  quantified  approach. 
Dynamic  analysis  and  prototyping  are  Increasingly  recognized  as  Important 
additional  aids  toward  assuring  the  consistency  and  correctness  of  the  evolving 
schema.  .Auto-X  Is  the  tool  which  provides  this  support  for  AutoG  users. 
The  objective  of  this  tool  is  to  prove  that  the  concept,  specincatlon  or 
design  Is  workable  In  the  dynamic  sense  and  to  provide  the  necessary 
parameters.  If  required,  for  sizing  the  target  system. 

The  functional  specincatlon  of  a  system  Is  a  definition  of  Its  functional 
components  and  of  the  Interaction  that  lakes  place  between  them.  The 
Functional  Exerciser  (.Auto-X)  Is  designed  to  operate  upon  functional  speclHca- 
tlons  and  system  designs  structured  in  this  way  and  which  have  been 
formally  described  using  .Auto-G.  .Auto-X  functions  with  systems  which  have 
been  detlned  In  this  w-n'.  by  Intercepting  the  signals  (messages)  that  have  to 
be  pa.ssed  between  such  olijects.  It  Is  thus  used  In  a  similar  manner  to  the 
circuit  designer's  oscilloscope,  relying  upon  the  Information  passing  across  an 
Interface  to  verify,  and  characterize,  the  operation  of  a  functional  element. 

fslng  Auto-X.  functional  speclUcatlons  can  Ite  modeled;  In  this  way.  the 
implications  of  a  complex  set  of  reciulrements  may  be  demonstrated  to  the 
customer  who  can  then  confirm  that  the  specification  Is  complete. 

A  consolMateil  .Auto-G  reciulremcnts  specincatlon.  In  effect,  represents  a 
formal  environment  model  against  which  the  as.soclated  system  design  may  be 
checkeil  for  consistency.  Throughout  the  design  stage.  .-VutoX  tua\’  be  used 
to  model  the  design  Itself:  the  design  model  Interacts  with  the  specincatlon. 
and  In  this  way  the  suitability  of  the  design  can  be  conllrmcd.  If  t  Ik' 
design  is  not  comiileted  to  the  lowest  kwel  of  detail,  the  design  can  still  be 


modeled  using  the  Auto-X  but  the  Auto-G  checker  Identiries  that  there  Is 
further  design  work  to  be  done. 


2.  Wliat  type  of  progress  metric  does  the  system  produce?  Is  It  quantifi¬ 
able  measure  of  completeness? 

The  question  Is  answered  In  Section  19c. 

3.  Describe  bow  your  system  supports  documentation,  program  management 
and  control. 

The  purpose  of  documentation  Is  to  record  Information  about  a  system  In  an 
(orderly  manner  In  order  that  people  may  understand  the  system  either  to 
build  It.  to  use  It  or  to  maintain  It.  The  outputs  from  Auto-G  (either 
graphical  or  textual)  are  an  easy- to- understand  formal  representation  of  either 
the  speclHcatlon  of  the  system  or  of  the  system  Itself:  quite  simply.  Auto-G 
systems  are  largely  self-documenting.  The  Auto-G  databtxse  has  also  been 
linked  to  other  tools  Including  one  which  generates  documentation  to  DoD 
standards  e.g.  DOD-STD-2167.  Documentation  produced  directly  from  Auto-G 
dues  not  eliminate  the  need  for  user  manuals  and  hardware  maintenance 
documentation.  In  addition.  It  is  useful  to  record  the  critical  decisions  that 
affected  the  design:  Informal  comments  within  the  the  design  tend  to  amplify 
\\'i-L\T  Is  done  rather  than  Wm'. 

Information  stored  by  .\uto-G  Is  stored  In  .\uto-G  documents.  Within  the 
Auto-G  database,  each  document  has  Its  own  physical  file.  These  documents 
can  l)e  arranged  In  a  hierarchy  to  reflect  the  breakdown  of  the  design  phase 
Into  a  network  of  design  activities.  Each  design  activity  can  then  be 
worked  on  by  an  Individual  or  by  a  small  team  working  closely  together. 
Estimating  how  much  effort  Is  required  for  each  design  activity  can  only  be 
done  empirically:  with  a  set  of  effort  e.stlmate.s.  critical  path  analysis  and 
resource  scherlullng  could  easily  be  done  ba.sed  upon  the  network  described 
by  AutoG. 


Auto-G  can  lie  linked  to  another  Uk)|.  or  can  be  fully  Integrated  with  a 
piadect  sii[)[)ort  environment  (P^SE)  which  provides  conllguratlon  control  of 
Auto-G  documents  and  of  other  documentation. 

•1.  Describe  how  your  system  supports  real  time  design. 

Auto-Ci  suppf)rts  a  semantic  model  w-hlch  Is  capable  of  representing  any 
I'uncticmal  ctjucept.  however  complex.  In  a  way  which  Is  clear  atid  unambigu¬ 
ous.  'I'lie  formal  G/T  notation  Is  able  to  describe  completely  all  functional 
a.''pccts  of  a,  real-time  system  namely: 
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System  Structure 
-hierarchy 

-Independent  processes 
-common  procedures 
-data  areas 


Process/Procedure  Behavior 
-local  data  and  data  flow 
-Internal  control  flow 
-transitions  between  states 
-processing  algorithms 


Communication  Between  Functions 
-messages  sent  and  received 
-external  data  accessed 
-common  functions  utilized 
-detailed  protocol  descriptions 


Configuration  Management 
-modular  construction  and  test 
-parallel  design  activities 
-system  engineering 


Other  features  that  make  Auto-G  particularly  appropriate  for  applications’  to 
complex  real-time  computing  systems  Include  the  formal  representation  of 
time,  and  full  support  for  generic  design  templates. 


5.  Describe  how  your  system  supports  concurrency,  parallelism. 


.■>.1  .\utoG  Supports  Concurrency. 

The  .\uto-G  semantic  model  postulates  the  whole  of  a  system  and  Its 
environment  its  a  set  of  Independent  concurrent  processes  that,  fundamentally, 
operate  asynchronously.  They  Interact/communicate  only  through  the  passing 
of  me.ssages  (called  ’signals’).  Thus  Figure  5.1  represents  a  system  which 
ccmtalns  two  concurrent  processes,  and  which  Interacts  with  two  types  of 
process  In  Its  environment. 

\Mien  processes  communicate.  It  Is  not  necessary  for  the  sender  and  the 
receiver  to  he  synchronized:  the  sender  can  dispatch  a  message  which  may 
not  be  attended  to  by  the  receiver  until  some  later  time.  Where  functional¬ 
ly  required,  synchronization  between  two  processes  Is  represented  by  a 
protocol  Involving  an  exchange  of  messages.  The  G/T  notation  therefore 
-ui)[)orts  precisely  the  behavior  of  proces.ses  In  the  real  world. 

5.2  Aul(hG  Supports  Parallelism. 

TIu-  Aufo-G  semantic  model  describes  the  behavior  of  a  process  as  setiuences 
of  actions  which  may  be  trlggerefl  by  various  conditions  or  events.  The 
C./T  notation  allows  the  designer  to  distinguish  between  actions  that  must  l)e 
peii’ormed  In  a  detlnlte  order  (Figure  5.2)  and  groups  of  actions  that  need 
iiot  be  [)error!ned  In  any  particular  or<ler  provided  that  all  are  completed 
before  the  iiext  uctloii  Is  started  (see  figure  5.5).  .\  description  of  behavior 


CONCURRENT  PROCESSES 
COMMUNICATING  VIA  SIGNALS 


which  uses  Uie  concept  of  unordered  actions  Identifies  those  parts  of  the 
design  where  parallel  processing  could  give  a  faster  execution. 

6.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

Xo.  -As  a  free-standing  computer  aided  design  (C^\D)  tool,  Auto-G  can  be 
used  to  produce  a  proven  design  that  can  be  Implemented  manually  In  any 
language  suitable  for  real-time  systems. 

The  Auto-G  database  has  been  linked  to  other  tools  for  use  during  the 
Implementation  phase:  one  such  tool  Is  a  text  editor  which  guides  program¬ 
mers  coding  In  .JO\T-VL:  another  tool  generates  test  data  automatically  using 
as  a  basis  the  Interface  descriptions  within  the  database. 

If  a  tmlset  Code  Generator  Is  used,  then  It  Is  possible  to  generate  object 
code  directly  without  the  use  of  any  Implementation  language. 

7.  Does  you  system  produce  Ada  PDL? 

AutoG  already  produces  various  codes  directly  from  a  design  (e.g.,  .Ada.  C): 
studies  have  shown  that  other  codes  (e.g.  occam)  could  be  produced  relativel.v 
easily. 

Tlie  G/T  notation  permits  as.sercions  about  the  design  to  be  embedded  within 
the  design.  Just  as  .\da  PDL  Is  embedded  within  an  Ada  program.  .\utoG 
does  mn  at  present  produce  .Ada  PDL,  but  It  could  be  extended  to  do  so  If 
required. 

8.  Describe  how  your  system  supports  life  cycle  Intraphase  &  Interphase 
communications. 

One  of  the  major  headaches  In  systems  development  can  be  the  use  (d'  many 
notations  at  different  phases  of  the  life  cycle.  Whenever  Information  ha'-;  to 
be  transformed  from  one  notation  Into  another,  there  Is  the  danger  of  the 
loss  or  illstortion  of  that  Information,  particularly  when  either  of  the  nota¬ 
tions  Isn't  hamial.  Auto-G  has  a  complete  formal  notation  that  can  l)e  used 
at  ever.v  stage  of  the  system  development.  The  benefits  of  this  are  three¬ 
fold:  fiistly.  transformation  errors  are  eliminated:  secondly,  the  use  of  the 
same  notation  ihroughoui  i  h«'  life  cycle  makes  It  much  ea.sler  to  compao'  iIh' 
O'litpiits  (,f  diffei-ent  ptui.ses:  thirdly,  the  use  of  a  single  notation  within  a 
pi-ojert  rrilurfs  the  learning  curve  for  the  development  personnel. 
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1  'rj:i;!'r  s.i  sliou";  the  dllTerences  between  the  sueceyslve  phase  of  the  lll'e 
I'vei'-.  'I'he  tbllowlug  paragraphs  describe  these  phases  and  show  how  AutoG 
rates  the  transition  from  one  plntse  to  the  next. 

Autv^t,  naturally  obliges  the  analyst  to  take  a  structured  approach  to  the 
understanding  and  expression  of  a  requirement.  He  begins  by  using  .\uto-G 
to  capture  Information  about  the  system  as  it  is  seen  from  a  number  of 
different  viewpoints.  Initially,  what  is  known  about  the  system  from  one 
vlewpioint  may  be  imprecise  or  ambiguous;  Auto-G  identities  these  uncertain 
areas  so  that  the  analyst  can  request  clarltlcatlon.  Although  the  Information 
captured  by  .\uto-G  is  clear  and  unambiguous,  it  is  likely  that  different 
vlewpcdnts  will  be  inconsistent  with  each  other.  The  AutoG  notation  makes 
it  easy  to  Identify  where  the  requirements  of  different  viewpoints  overlap,  and 
where  one  viewpoint  disagrees  with  another. 

The  requirements  capture  phase  is  followed  by  an  analysis  and  consolidation 
phase.  During  this  phase,  the  analyst  pieces  together  the  picture  from  the 
different  viewpoints,  and  refers  to  the  users  to  resolve  the  Inconsistencies  that 
are  present.  AutoG  enables  the  results  to  be  cheeked  automatically  for 
consistency,  and  .-VutoX  enables  the  Implications  of  the  results  to  be  under- 
st(,x)d  and  agreed  with  the  users.  The  output  from  this  plntse  is  an  agree(l 
complete  formal  description  of  the  interface  between  the  system  and  its 
tuivlronmcnt.  an(l  an  environment  iintdel  that  represents  the  performance 
f-rlterla  for  the  system  to  be  accepted. 

future  releases  of  .-VutoG  will  provide  automated  assistance  to  the  process  of 
identifying  mutually  inconsistent  viewpoints  and  of  consolidating  them  into  a 
eonslstent  picture. 

A  system  may  be  doing  many  things  at  once:  in  the  design  pha.se.  a 
lechnUiue  of  functional  decomposition  is  used  to  Identify  functions  that  cannot 
be  [lerformed  concurrently.  .Xuto-G  enables  the  designer  to  represent 
exiilleltf'  the  fundatnctit al  timing  retiulremenls  and  to  arrive  ;it  a  phuislble 
de-igti.  'fh:'  tiiatch  of  t lic  design  against  the  specincatlou  can  be  done  by 
vlMial  liispectloti  -  this  is  straight forwtird  because  both  the  specincal ion  and 
the  design  are  expressecl  in  the  same  notation.  'Fhe  detailed  behavior  Is  also 
■lieei<(  (1  iierlodieally  against  the  sfutcincatlou  using  Auto-X:  when  the  deittlleil 
de-bj,!!  1--  complete,  the  oiitituts  frotu  Auto-X  will  prtovldt'  an  a.sst'ssmeiil  of 
the  eom|iutliig  resources  reciulreil  by  the  system.  'I'he  outiuit  froui  this 
piia.'e  1'  a  de'-ltiii  which  Is  ;i.‘<  g(K)d  .a.'-:  can  po.sslbly  be  .achfwed  on  the  ba.sis 
f  c  I'lill  I  fviiamlc  aiial\'^ls. 
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Figure  8.1  :  PHASES  IN  THE  SYSTEM  LIFE  CYCLE 


Using  Information  provided  by  Auto-X.  a  suitable  architecture  can  be 
proposed  for  the  target  system,  and  this  architecture  can  be  described  using 
the  G/T  notation.  It  Is  Intended  to  provide  assistance  for  this  In  future 
releases  of  Auto-G.  Once  the  architecture  Is  adequately  described,  code 
generation  for  the  system  can  be  made  fully  automatic.  Alternatively,  the 
detailed  design  may  be  given  to  a  team  of  programmers  for  Implementation 
using  a  manual  coding  phase. 

Coding  Is  followed  by  testing  In  the  traditional  manner,  except  that  the 
acceptance  criteria  are  formally  dellned  :is  part  of  the  requirement.  If  the 
target  processor  selected  for  Implementation  Is  the  Sofchlp  Processor  developed 
by  Advanced  System  Architectures,  then  AutoX  Is  used  as  the  symbolic 
debugger  during  the  testing  phase. 

9.  Is  your  system  automated,  executable,  compilable? 

9.1  Auto-G  Is  Automated. 

The  .\uto-G  workstation  Is  an  Intelligent  i(x>l  which  enables  the  user  to 
develop  a  speclllcatlon  or  a  design  within  the  rules  of  the  .\uto-G  semantic 
model.  The  graphics  Interface  to  Auto-G  uses  a  syntax-driven  menu,  which 
changes  as  the  user  modines  his  document  -  It  Is  Impossible  to  create  a 
document  that  Is  syntactically  Incorrect.  The  texttial  Interface  performs  a 
complete  syntax  check  on  a  document  each  time  It  Is  returned  to  the 
database.  In  addition  to  these  syntax  checks,  the  .-\.uto-G  checking  function 
performs  an  automatic  check  on  the  semantics  of  any  Auto-G  document(s). 
and  on  their  consistency. 

9.2  .\uto-G  Is  Executable. 

AutoX  enables  any  specltlcatlon  or  design  to  be  checked  dynamically. 

AuioX  uses  an  executable  code  derived  dlrecrly  and  automatically  from 
Auto-G  documents. 

9.3  AutoG  Is  Compllal)le. 

A  number  (jf  Code  Generators  will  be  available  during  1987  for  use  with  the 
Auto-G  toolset.  These  Code  Generators  will  produce  either  an  object  code 
for  a  particular  target  processor,  or  a  portable  High  Order  Language  which 
can  !)('  comiiiled  to  a  number  of  (ji'ocessors.  A  Code  Ctuierator  for  .\SA's 
Sofchlp  Proc(ss(;r  (a  dynamic  [)arallel  processor)  is  nearly  comitleb':  this  will 
be  foMoweil  by  C  ode  Generators  |)roducing  program  text  In  both  Ada  and  ( '. 


10.  Describe  the  graphics  support  for  your  system. 
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Auto-G  provides  two  Interchangeable  and  complementary  man-machine 
Interfaces  -  both  a  textual  and  a  graphical  Interface. 

The  graphical  Interface  Is  used  to  produce  documents  In  the  form  of  G 
diagrams.  Auto-G  uses  a  syntax-driven  menu,  which  changes  as  the  user 
modines  his  diagrams  -  It  Is  Impossible  to  create  a  diagram  that  Is  syntacti¬ 
cally  Incorrect.  Aulo-G  Includes  a  powerful  set  of  editing  commands  for  the 
fast,  accurate  production  of  diagrams.  These  may  be  entered  from  the 
keyboard  or  selected  from  the  on-screen  menu.  Prompts  Inform  the  user 
when  the  system  Is  waiting  for  further  Input  e.g.  to  complete  an  operation  of 
for.  the  next  command. 

Pacllltles  Include;  Change.  Move.  Copy.  Delete.  Hide,  and  Reveal  one  or  more 
Items:  Explode.  Implode.  Insert,  reposition.  Scale  Up  or  Down,  and  Select  an 
Item. 


Commands  which  a.sslst  the  designer  to  gain  a  clearer  picture  of  the  context 
of  a  pai-tlculai-  pttrt  of  a  G  diagram  Include  Zoom  In.  Zoom  Out.  Explode. 
Implode,  hide,  and  Reveal.  .\ll  of  these  may  temporarily  (or  permanently) 
adjust  the  current  'view'  of  an  Item  In  relation  to  Its  components  or  Its 
surroundings. 
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A  most  Important  <tspect  of  AutoG’s  editing  facilities  Is  the  ability  to  select, 
dlsiday.  manipulate  and  store  meaningful  and  consistent  subsets  of  documents. 
These  are  referred  to  vts  'views',  and  can  be  used  for  various  purposes.  It  Is 
possible  to  have  many  views  of  the  same  document,  and  to  produce  view 
diagrams  in  hardcopy  for  use  In  presentations  and  In  printed  documentation. 

A  view  can  pi-o\ide  a  summary  of  all  or  part  of  a  design,  uncluttered  l)y 
detail  or  lower  levels  of  abstraction.  The  most  Important  benelTt  of  views  is 
that  they  can  be  used  to  communicate  Ideas  and  Information  very  effectively. 

11.  Describe  how  your  system  supports  concepts  of: 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-Typing 

-Evolutionary  development 
-Generics 
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-Macrcjs 
-Data  flows 
-Control  Hows 

Auto-X  Is  a  prototyping  tool  with  a  dllTerence;  the  prototype  Is  one  and  the 
same  as  the  design  belnf  developed.  Using  Auto-X,  the  working  prototype  Is 
not  thrown  away  -  It  Is  progressively  refined  until  It  becomes  the  complete 
detailed  design. 

Using  AutcvG.  a  system  and  Its  operating  environment  are  described  as  a  set 
of  asynchronous  functions  (objects)  coupled  together  via  simple  unidirectional 
communication  links  (signals).  Auto-X,  Is  designed  to  operate  upon  system 
designs  structured  In  this  way  which  have  been  formally  described  using 
AutoG. 

AutoX  Is  designed  so  that  It  can  be  used  at  every  level  of  the  design 
process.  .\uto-X  contains  facilities  for  Incorporating  assumptions  and  estimates 
about  the  behavior  of  parts  of  the  .system,  and  the  external  world.  .\t  any 
stage.  Auto-X  can  be  used  to  connrm  the  matching  between  the  system 
design  and  Its  speclllcatlon.  and  to  produce  reliable  estimates  of  the  system 
performance.  .As  the  design  of  the  system  Is  developed,  the  assumptions  are 

i- eplaced  f>y  design  detail,  and  estimates  based  upon  outputs  from  .\utoX  are 
progressively  reHned  and  Improved. 

.\uto-X  provides  facilities  to  describe  the  dynamic  properties  of  the  functional 
objects  and  the  way  they  communicate.  The  user  may  specify  time  delays 
caused  by  processing  wlthlit  a  function,  and  al.so  delays  associated  with 
Inter-functlon  signal  transfer.  The  user  may  set  up  signal  transfers  between 
functions  In  which  valid  random  values  are  generated  for  data  Helds.  In 
addition,  the  user  may  load  the  system  In  a  predetermined  manner  by 
specifying  'Signal  traffic  distributions. 

Once  these  i):iramerers  have  been  speclHed  for  the  set  of  system  functions  of 
interest  (and  for  their  external  environment),  dynamic  exercising  of  the 
'■ystem.  Ml  the  level  specified,  can  Itegln.  .-VuloX  logs  events  within  the 
'.\-^tein  that  c;in  be  used  for  ilynamlc  flow  analysis.  Many  different  oi)tlons 
are  available  to  tlie  user  to  allow  him  to  verify,  modify,  and  metrlcate  his 
e\(ilving  system,  'fliese  facilities  allow  him  to  gather  statistics  that  can  be 

ii- .ed  to  vciiie  the  real  system  and  to  infer  Its  perfoianance.  In  addition. 
.\iii<r-\  provides  facilities  that  .allow  the  user  to  Interact  will)  t  lit'  syswan  at 
all  hu'cls. 


Once  a  design  has  been  completed  down  to  the  lowest  level  the  effect  of 
Auto-X  closely  parallels  the  operation  of  the  conventional  debugger.  Dead¬ 
locks  and  race  hazards  In  a  structure  can  be  clearly  Identified  at  an  early 
stage  In  the  design  cycle. 

Once  a  test  has  been  set  up.  It  can  be  run  any  number  of  times.  It  Is 
therefore  possible  to  set  up  acceptance  tests  for  any  part  of  a  system  (up  to 
and  Including  the  entire  system):  these  tests  can  be  re-run  whenever  any 
change  Is  made  which  affects  that  part  of  the  system. 

The  G/T  notation  encourages  designers  to  develop  generalized  solutions  to 
system  problems.  These  generalized  designs  may  then  be  re-used  efllclently 
In  different  circumstances. 

There  are  two  aspects  of  the  G/T  notation  that  are  connected  with  design 
reusability:  generics  and  macros. 

The  G/T  notation  supports  several  kinds  of  Information  hiding. 

From  an  operational  point  of  view,  the  notation  supports  object-oriented, 
hierarchically  structured  systems.  To  describe  systems  of  this  sort,  the 
notation  supports  scope  and  visibility  rules  that  can  be  used  to  prevent  a 
functional  object  from  referring  to  or  accessing  an  entity  defined  Inside 
another  object. 

From  a  development  viewpoint,  the  graphical  man-machine  Interface  of 
.-VutoG  supports  a  different  kind  of  Information  hiding  through  Its  ’view' 
facllUy.  The  view  facility  enables  the  user  to  hide  or  reveal  any  Item  within 
a  G  diagram  or  to  alter  Its  relative  size  and  position.  View  Information  can 
be  stored  within  the  database  and  a  user  can  maintain  many  views  concur¬ 
rently  of  a  single  AutoG  document:  .\uto-G  guarantees  that  all  the  views 
are  consistent  with  the  underlying  design.  Figures  11c. 1.  llc.2  and  llc.3  are 
all  views  (h’  a  design  that  Is  much  t(X)  large  to  be  shown  clearly  on  an  Ad 
page,  '['he  view  faclilty  Is  far  more  than  a  means  of  hiding  Information  -  It 
Is  also  a  i)Owerful  means  of  communicating  information. 

I'slng  Auto-G.  it  is  easy  to  describe  any  system  as  a  set  of  modules,  each 
descrilied  within  a  separate  AutoG  design  <locument.  For  every  document, 
the  usei-  supplies  a  name  and  a  set  of  version  descriptors  that  together  form 
an  unU|ue  document,  Identiner. 
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Figure  11c.  1  :  THREE  VIEWS  OF  THE  SAME  DESIGN 


A  package  of  modules  may  be  defined  by  creating  an  Auto-G  'configuration 
document'  which  lists  the  names  and  versions  of  all  the  components:  the 
package  could  be  a  complete  system,  or  a  group  of  functions  within  a 
system.  Modules  may  be  used  In  many  different  systems  simply  by  Identify¬ 
ing  them  In  the  appropriate  configuration  documents.  When  It  Is  necessary 
to  change  a  system  by  altering  one  of  Its  modules,  the  module  document  Is 
given  new  version  descriptors  -  this  makes  It  Impossible  for  changes  to  be 
made  Inadvertently  to  the  original  system. 

Auto-G  also  supports  the  concept  of  packaging  through  the  use  of  generic 
design  templates. 

Auto-G  provides  total  support  for  the  concept  of  abstraction.  Using  a 
top-down  approach  to  specification  or  design,  the  user  may  begin  with  very 
general  Ideas  which  he  can  then  decompose  into  lower  levels  of  greater  detail. 
The  process  of  decomposition  may  be  applied  to  both  the  structure  of  the 
system  and  to  the  behavior  of  Its  components.  .\uto-G  allows  the  designer 
to  use  as  many  levels  of  abstraction  as  he  wishes  until  he  reaches  the 
'atomic'  structural  or  behavioral  statements.  Figures  lle.l,  lle.2  and  lle.:3 
show  the  progressive  decomposition  of  a  simple  system  as  seen  through  the 
graphical  man-machine  Interface. 

Every  object  In  the  G/T  notation  has  a  type  which  determines  what 
operations  can  be  performed  on  that  object. 

Every  non-data  objects  have  a  type;  for  example,  an  object  of  type  'signal' 
may  he  sent  or  received,  an  object  of  type  'Independent  function'  may  be 
given  as  the  destination  of  a  signal. 

For  data  objects,  the  G/T  notation  has  many  bullt-ln  types  (e.g.  Integer,  set. 
character-string)  out  of  which  It  Is  possible  to  define  complex  record  types. 

The  notation  etiables  the  itser  to  define  his  own  types  as  a  matter  of 
convenience.  For  Instance,  a  single  type  could  be  defined  to  represent  a 
record  structure  with  many  fields  of  differing  types. 

The  user  can  define  his  own  'new'  types  which  are  distinct  from  all  other 
types:  new'  types  can  be  itsed  to  prevent  design  errors  such  tvs  can  occur 
through  tlie  use  of  the  wrong  units  In  an  expression  of  quantity.  For 
Itistance.  by  defining  'new'  tyiies  for  minutes  and  secotids.  any  Inadvertent 
a.'^signtnent  of  mltitites  to  a  variable  of  type  seconds  may  be  detected 
automatically. 
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Type  checking  Is  done  whenever  possible  throughout  the  Auto-G  toolset.  A 
major  part  of  the  work  of  automatic  checking  within  Auto-G  Is  to  ensure 
that  an  object's  type  Is  compatible  with  Its  usage. 

Every  Auto-G  document  has  a  user-supplied  name  and  set  of  version 
descriptors  that  together  form  a  unique  document  Identlller.  This  labelling  of 
documents  Is  suitable  for  enforcing  configuration  management  and  build  state 
controls  during  the  development  of  systems. 

A  package  of  modules  may  be  defined  by  creating  an  Auto-G  'configuration 
document'  which  lists  the  names  and  versions  of  all  the  components.  When 
a  module  Is  changed,  It  Is  given  new  version  descriptors.  To  produce  a 
package  that  Includes  the  changed  module,  a  new  configuration  document 
must  be  created  giving  the  new  version  Identifiers. 

The  G/T  notation  fully  supports  the  concept  of  generics.  Using  the  notation. 
It  Is  possible  to  design  generalized  solutions  to  problems  as  'design  templates'. 
These  templates  can  be  used  for  creating  real  objects  within  a  system. 

Values  and  identifiers  used  within  the  design  of  a  template  may  be  supplied 
by  parameters  so  that  their  application  can  be  as  general  as  possible.  The 
notation  also  supports  generic  operators  and  procedures. 

Figures  llh.2  and  iih.3  show  the  use  of  a  template  within  a  system.  In 
the  examples,  the  template  is  a  pattern  for  a  function  that  controls  electrical 
equipment.  The  template  has  six  parameters,  namely  the  voltage  and 
frequency  at  which  the  equipment  runs,  the  format  of  the  M_ON  signal,  the 
format  of  the  M_OFF  signal  and  the  formats  of  signals  (TEST_ST.-VRT  and 
TE.'^T_END)  used  to  TEST  the  equipment. 

The  equipment  In  Figure  llh..3  does  not  have  a  test  function  and  so  the 
TEST_ST.-\RT  and  TEST_ENI)  parameters  are  not  used:  those  parts  of  the 
template  that  relate  to  self-test  are  redundant  In  this  case.  When  a 
template  Is  used,  the  .\\ito-G  checker  Identifies  any  redundant  design, 
removes  It  and  checks  what  remains.  Only  the  non-redundant  parts  of  the 
design  are  used  for  automatic  code  generation. 

The  G/T  notation  suijports  the  concept  of  meaningful  text  substitution 
macros.  Using  the  notation.  It  Is  possible  to  define  convenient  synonyms  hu- 
an\-  name  (;r  expressUm.  Atito-G  checks  that  every  macro  Is  correctly 
defined,  and  that  each  use  matches  the  definition. 
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The  G/T  notation  allows  the  designer  to  describe  data  structures  of  arbitrary 
complexity.  Data  may  be  global  to  the  system,  or  may  be  local  and  private 
to  part  of  the  system.  The  characteristics  of  a  variable  can  be  declared 
precisely  be.  Its  type.  Its  Initial  value,  whether  it  Is  read/write  or  read  only 
and  what  functions  may  access  It. 

Normally,  data  Is  carried  between  functional  objects  by  .signal.  Functional 
objects  may  also  read  and  write  to  external  data  If  this  Is  consistent  with 
the  way  the  data  htts  been  declared. 

For  any  function.  Auto-G  allows  the  designer  to  deHne  Its  communications 
Interface  -  that  Is.  the  external  data  that  Is  accessed,  and  the  types  of  signal 
sent  and  received.  Interface  dellnltlon  may  be  done  at  any  level  of  abstrac¬ 
tion  (as  shown  In  Figure  llj.l),  and  the  consistency  of  the  Interface  dellni- 
tlons  at  every  level  Is  checked  automatically  by  Auto-G.  The  communication 
subsymbols  make  explicit  the  use  and  flow  of  data  within  the  .system.  The 
flow  of  data  can  be  made  even  clearer  by  Joining  the  send’  action  In  one 
function  to  the  'receive'  action  In  another  (as  shown  In  Figure  llj.2). 

'['he  use  of  the  G/T  notation  alone  cannot  adequately  describe  data  flows 
becau.se  the  system  consists  of  concurrent  functions.  This  Is  because  a  static 
analysis  cannot  determine  what  data  values  are  passed  arounti  when  several 
functions  access  the  same  variable.  One  of  the  outputs  from  Auto-X  Is 
Infoimiatlon  on  how  data  Is  used  moment  by  moment:  from  this  Information. 
.\utoX  generates  a  trace  listing  showing  the  actual  data  flows  within  the 
.A'sfem. 

.\uto-G  allows  the  behavior  of  each  concurrent  function  to  be  described  in 
terms  of  a  state  transition  network  be.  a  .set  of  of  discrete  states  and  a  set 
(tf  transitions  between  those  states,  where  transition  Is  a  seciuence  of  actions 
triggered  by  some  comJltlon  or  event.  The  graphical  representation  of  a 
nctwoi'k  Is  very  similar  to  a  traditional  flowchart. 

The  (i/'r  notatl(;n  iiei'inlts  design  at  any  level  of  abstraction,  and  what  is 
dexalbed  ;i.s  an  .action  at  one  level  may  I)p  decomixxsed  into  a  network.  In 
rlil>  way.  the  notation  permits  one  network  to  l)e  nested  within  another 
ii'-twork.  .\  tyidcal  use  of  nested  ntuworks  Is  where  a  high  le\'el  action 
r^a|lllre•-  eommunlcatlon  with  another  function:  :i  G  examide  of  this  Is  slKnvn 
ill  I'lgnr''  I  Ik. I. 
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INTERFACE  DEFINITION  AT  ANY  LE 


DATA  FLOW  BETWEEN  PROCESSES 


12.  b  there  a  paradigm  embedded  lu  your  system?  If  so,  describe  It 
briefly. 

The  G.T  notation  Is  methodology  Independent  and  therefore  does  not 
postulate  any  embedded  paradigm.  This  means  that  the  front  end  part  of 
the  AutoG  toolset  does  not  contain  any  embedded  paradigm. 

Auto-G  supports  the  developntent  of  object-oriented  systems  consisting  of 
itsynclironous  functional  objects  communicating  only  by  asynchronous  messages 
(with  non-destructive  send  and  destructive  receive).  For  Implementing 
systems  of  this  sort.  Advanced  System  Architectures  have  developed  special 
hardware  kernels  which  enable  messages  to  be  sent  efficiently  between 
functions  with  a  processing  overhead  of  the  order  of  microseconds  rathei"  than 
milliseconds.  This  efOclent  message  handling  makes  It  practical  to  forbid  the 
use  of  shared  data.  For  users  wishing  to  Implement  object-oriented  systems, 
the  back  end  of  the  toolset  (l.e.  the  .\uto-G  checker.  Auto-X  and  the  Code 
Generators)  currently  has  rules  built  In  that  restrict  the  use  of  concepts 
available  in  the  notation  to  vvhat  can  be  supported  in  the  target  environ¬ 
ment.  It  Is  Intended  to  produce  alternative  versions  of  these  tools  supporting 
different  target  environments. 

13.  Describe  the  external  tools  with  which  your  system  Interfaces  (tool 
compatibility). 

Auto-G  has  been  designed  with  all  the  ’hooks’  necessary  to  Integrate  It  fully 
within  project  support  em'lronments  In  which  additional  facilities  (such  as 
conlTguratlon  management  and  project  management)  are  provided  by  other 
tools. 

with  help  from  Advanced  Sysrem  .\rchltecMires.  customers  have  successfully 
linked  the  .\ut(^G  database  to  (Aher  tools  within  their  own  prc^i)rletary 
development  environments;  one  such  ta)l  Is  a  text  editor  which  guides 
[irogramtners  coding  In  .lOXlAL:  a  second  trx)l  generates  test  data  automati¬ 
cally  using  .a.s  a  Ictsls  the  Interf.acc  <lcscrli)tlons  within  the  database;  a  third 
r(K)l  automatically  geneiaates  documentailoii  io  DoD  standarfls  e.g.  DOD-Sd'D- 
21(57. 

AsA  h:i.s  plans  to  link  Auto-G  directly  to  the  OR.\CLE  database  for  which 
other  tools  are  also  avallabl(>.  In  addition.  <lcve!opcrs  of  I’Jxperl  warm  GF\OS. 
and  IS'I'AR  have  evaluated  .\uto-(;  with  a  view  to  Including  It  within  tin'll' 
products.  ASA  F  UHUillorlng  the  Portable  Gomiuon  'fools  fauli'oimieul 
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iPCTE)  Initiative;  It  Is  hoped  that  this  Initiative  will  propose  a  set  of 
Interface  standards  that  can  be  adopted  by  Auto-G. 

H.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  object-oriented  design. 

Id.l  Flow  Direction 

Auto-G  encourages  a  top-down  approach  to  design  since  It  allows  any  number 
of  levels  of  abstraction.  Auto-G  Is  capable  of  expressing  the  concepts  used 
in  any  of  the  popular  structural  design  methodologies.  Advanced  System 
Architectures  provides  training  In  system  design  which  uses  a  set  of  objective 
criteria  to  decide  how  to  functionally  decompose  the  system. 

Alternatively,  a  bottom-up  approach  can  be  used  In  which  small  functions  are 
designed  in  isolation  and  then  put  together  to  form  a  system. 

'■\  hether  a  ptire  top-down  or  bottom-up  approach  Is  used,  or  a  mixture  of 
the  two.  the  .\uto-G  checker  performs  a  complete  check  of  the  system  and 
identlHes  aspects  that  might  Indicate  a  pcxtr  design. 

1-1.2  Hlerarchlal  Decomposition.  Architectural  Perspectives  and  Object- 
Oriented  Design 

'I'he  view  facility  described  In  the  response  to  Question  10  allows  the  system 
to  tie  examined  from  any  architectural  perspective.  The  G/T  notation  fully 
>ui'ports  both  hierarchical  decomposition  and  an  object-oriented  design; 
examples  of  these  aspects  of  the  notation  are  given  In  the  response  to 
Quest  ion  .5. 


15.  Is  your  system  supported  by  formal  syntax  &  semantics?  Describe 
briefly. 

't'ev.  I'oi-  both  I  he  graphical  ami  the  textual  man-machine  Interfaces  of 
.\uto-(..  a  formal  abstract  syntax  and  semantics  exists  In  the  form  of  an 
alisirai’t  language  D  which  Is  Invisible  to  the  user. 

Ititli  coiici’ete  syntaxes  ((i  and  T)  are  translatu'd  Into/from  1)  b.v  Auio-G; 

I  hi'  'uisiires  comiileie  conslsteney  between  the  graphical  and  textual  r(i)r('s('n- 
'■iiion-  ami  also  luakcs  1  wo  way  translations  possible. 

i'hi-  Ani'^ti  liiceki'r.  Auto-\  ami  the  ('o<le  ChuK'rators  all  operate  on  the  i> 

O-pi  '  -(■  11 1  at  |oi|  ( ( l<  icii  I  lli’iit  s. 
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16.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

The  purchase  and  maintenance  cost  of  the  Auto-G  depends  upon  the  number 
of  simultaneous  users  of  the  system  that  are  anticipated  -  this  figure  Is 
normally  less  than  the  number  of  people  who  may  use  this  system. 

Foi'  each  ‘user’,  the  purchase  cost  of  Auto-G  Is  $15,CXX).C)0.  The  annual 
maintenance  charge  of  an  Auto-G  system  Is  priced  at  15%  of  the  full 
pui'chase  cost.  For  large  Auto-G  systems  with  over  eight  simultaneous  users, 
there  Is  a  slgnincant  quantity  discount.  Site  licenses  can  be  negotiated. 

Advanced  System  .Architectures  provide  Initial  training  and  on-golng  support 
in  the  use  of  .Auto-G  tools.  The  cost  of  attending  a  4  day  training  course 
at  AS.A's  ofHces  In  Camberley.  UIv  Is  $1,125.00.  Courses  can  also  be 
ai-ranged  on  customer  premises. 

F-h'lces  for  other  components  of  the  .Auto-G  toolset  (l.e.  .Auto-X  and  various 
Code  Generators)  have  not  yet  been  fixed. 


17.  Indicate  the  hostablllty  (measure  of  degree  of  portability)  of  your 
system. 

E* 

Auto-G  Is  available  on  any  Unix  or  AfMS  system  for  use  via  terminals 
(pi-eferably  with  a  mouse)  using  the  Regis  graphics  protocol. 

The  system  can  afso  be  supplied  for  Sun.  .Apollo.  V'.-AXstatlon  and  .Atari  lOdO 
P  ST  workstations.  These  workstations  can  be  linked  Into  other  development 

facilities  via  a  local  area  network  such  as  Ethernet. 


Auto-G  pnjdiices  hardcopy  diagrams  through  plotters  tislng  the  HPGL 
Iirotocol.  Laser  printer  output  Is  also  being  developed. 
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18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/rcpresen- 
tatlous  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

The  (i/'L  notation  can  describe  the  functionality  of  any  system,  not  merely 
of  a  ccaniiiitlng  system.  .Auto-Ci  iti'ovldes  a  complete  set  of  conci-pts  which 
m:i>  be  afqilleil  In  all  of  the  alxjve  a|)|)llc;tt Ions. 

A'  an  example.  Flgurf'  is.i  i-ei. resents  In  (i  a  time-pulse  trlggertal  'AND' 
ante.  I’igni'e  IS.I  |•e|)|•esents  It!  (i  a  time-pulse  triggered  ’.A.ND  gate.  l'’lgure 
is.i  erjiiiains  blitli  formal  and  Informal  p.arts:  the  text  within  the  function 
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symbol  (rectangle)  Is  Informal  commentary  text  ("AND  GATE");  all  other  text 
(TP.  A.  B.  A  .-VND  B.  C)  Is  formal.  The  function  Implied  by  the  symbol  Is 
that  when  a  time  pulse  (TP)  arrives,  the  values  existing  In  the  Inputs  (A,  B) 
are  read,  combined  by  a  logical  ^AND  (the  expression  "A  AND  B”)  and  the 
result  transferred  to  the  output  C.  The  function  Is  repeated  Indefinitely. 

19.  How  complete  Is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  methodology 
-A  management  methodology 
-All  of  the  above 

Auto-G  may  be  used  to  support  any  structured  design  methodology.  .Ad¬ 
vanced  System  .Architectures  recommends  its  own  complete  design  methodolo¬ 
gy  known  tts  the  Sofchlp  Design  Principles.  This  methodology  pre-supposes 
an  object-oriented  run-time  environment  which  provides  efficient  message 
passing  between  functional  objects.  This  methodology  Is  taught  by  .AS.A  on 
Us  training  courses,  and  Is  fully  described  In  .ASA’s  training  material. 

.\’ot  applicable.  If  .AutoG  Is  tised  to  produce  a  detailed  design,  then  program 
code  (e.g.  .Ada)  or  executable  target  code  may  be  generated  automatically 
dlrectl.v  from  the  design.  In  order  to  generate  the  complete  system  code,  the 
designer  must  design  down  to  the  lowest  level  of  detail;  some  users  consider 
that  detailed  design  done  using  .Auto-G  Is  programming  by  another  name. 

The  G/T  notation  makes  It  easy  to  structure  a  project  as  a  number  of 
parallel  work  activities. 

.AutoG  does  not  contain  any  [)roJect  control  facilities  as  It  Is  Intended  to  be 
used  In  conjimctioii  with  a  separate  project  control  system.  .Auto-G  has  the 
necessary  'hooks’  to  interconnect  with  any  project  control  system. 

i'he  (,/"r  notation  makes  It  easy  to  manage  the  i)a.rallel  evolution  of  a 
number  of  documents. 

Auiof,  does  not  cotiiain  any  coiinguratloii  management  facilities  :ts  It  is 
Intended  to  lie  nseil  In  fonjnnctlon  with  a  st'jtarate  conllguratlon  matiagemcmt 
system.  .\nt(sCi  has  the  necessary  'hooks'  to  Interconnect,  with  any  contlgn- 
ratlon  mamisenieiit  sys||.|ii. 
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20.  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/users). 

The  G/T  notation  supports  decomposition  of  a  system  Into  a  hierarchy  of 
documents  (containing  statements  or  submodules),  each  of  which  may  be 
developed  Independently  of  the  others  by  a  single  user  or  by  a  small  team 
working  closely  together.  The  notation  makes  explicit  the  dependency  of  one 
document  upon  other  documents. 

.\uto-G  Is  Intended  to  be  used  In  conjunction  with  a  project  configuration 
management  philosophy  -  the  G/T  notation  provides  the  means  of  Implement¬ 
ing  a  management  system  making  use  of  the  access  control  facilities  of  the 
host  operating  system.  If  Auto-G  Is  Integrated  fully  Into  a  sophisticated 
development  environment,  then  there  are  no  restrictions  on  how  many  users 
work  simultaneously  above  those  which  the  host  environment  Imposes.  Even 
without  a  sophisticated  development  environment,  documents  may  be  worked 
on  In  parallel  provided  that  development  work  on  each  document  Is  done  In 
a  separate  user  directory.  A  document  under  development  may  be  checked 
In  conjunction  with  other  documents  at  any  stage  provided  read  access  to 
other  documents  Is  permitted. 

For  use  on  large  projects,  one  .\uto-G  customer  Is  developing  an  Infrastruc¬ 
ture  In  which  .\uto-G  workstations  are  networked  Into  a  large  host  compitter 
which  acts  -as  a  file-server,  configuration  manager  and  database  machine. 

21.  Describe  how  your  system  supports  design  trade-offs. 

It  Is  Intended  to  enhance  .'\utf>G  so  that  It  provides  assistance  In  calculating 
various  design  metrics.  With  this  additional  functionality,  It  will  be  Impossl- 
ble  to  compare  alternative  design  solutions  and  to  select  the  most  appropriate 
design  for  the  problem  environment.  In  addition,  the  metrics  for  the  chosen 
solution  can  be  used  to  dimension  the  system  precisely. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

I’lie  (i/d'  notation  is  a  complete  formal  notation  that  can  be  used  to 
dc'^cfibc  all  functional  a.si)ects  of  any  system  -  Including  functions  that  are 
clectrlcnl.  electronic,  mechanical,  hydraulic,  coinptiter  hardware  and  softwarfu 
'>r  J)U])ian.  The  Ci/d'  notation  Is  particularly  suitable  for  tlescrlhlng  large 
complex  real-tlni''  ‘systems.  AntoG  makes  U.  ea.sy  to  use  the  G  language, 
and  provide',  auiomatlc  cheidclng  of  retinlrements.  specifications  and  designs. 


AutoG  has  been  used  successfully  to  develop  systems  In  the  following 
application  areas: 


telecommunications  and  digital  switching 
civil  and  military  command  and  control 
Industrial  process  control 
avionics  and  aerospace  systems 
limited  resource  management 

application  specific  Integrated  circuit  (ASIC)  design 

23.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  major 
users  of  your  system. 

Mr.  G.  Bryant 

GEC  Avionics  Limited 

Airborne  Display  Division 

Airport  Works,  Rochester 

Kent  MEl  2XX,  United  Kingdom 

Telephone  +4-1  6-43  -4-4-400  ext.  3237 

Mr.  A.  Bosnian 
Philips  AT  &  T 
Warrandebergstraat  8 
PO  Box  18,  1270  AA  Hulzen 
The  Netherlands 
Telephone  +31  35.87.48.90 

Mr,  J.  Davis 

British  .\erospace  pic 

Bracknell  Division 

Downshlre  Way  Bracknell 

Berks  RG12  IQL,  United  Kingdom 

lelephOilf  +44  .344  483222 

Frau  B.  Kuck-Wutzke 
MBB  ERNO.  Dept.  RB0:>2 
Paumrahrttechnlk  GmbH 
I  Iunereldstra.sse  1-5.  D-280<)  Bremen  1 
West  Germany 
'relef)li()ne  +19  121  539  4211 
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Mr.  S.  Taylor 

Thorn-EMI  Electronics  Limited 
Computer  Systems  Division 
Wookey  Hole  Road.  Wells 
Somerset  BA5  United  Kingdom 

Telephone  +-1-4  7-19  72081 


-102  Hislineld  Court 
Severiia  Park.  MD  211-16 


A 


JodTrey  Associates,  Inc. 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

PrtxMod  supplies  many  balancing  and  checking  runctlons  to  ensure  complete¬ 
ness  and  consistency.  The  manual  for  ProMod  "A  Complete  Desci-lptlon" 
max'  be  consulted  for  some  of  the  checks  made  by  ProMod.  Please  see  - 
Syntax  Checks  During  Creation.  Structured  Analysis  Analyzer.  Modular  Design 
Analyzer,  and  Pseudocode  .\nalyzer. 

2.  What  type  of  progress  metric  does  the  system  produce?  Is  It  (]uantin- 
able  measure  of  completeness? 

ProMod  supplies  the  number  of  objects  contained  In  the  pi'oject  library. 

Tills  would  include  the  number  of  data  flow  diagrams,  data  Items,  etc.,  that 
hax'e  been  detlued  thus  far. 

:i.  Describe  how  your  system  supports  documentation,  program  management 
and  control. 


Pro.Mod  does  not  have  facilities  for  Gant  charts  etc.,  to  support  project 
management.  However,  there  Is  a  wide  range  of  high-level  and  detailed  level 
I'ei'iorts  that  can  be  pulled  to  allow  monitoring  of  progress.  For  details  on 
tliesn  reports  see  Comfilete  Description"  -  Documenting  and  Reporting. 

i.  Describe  how  your  system  supports  real  time  design. 

Pi'o.Mod  offers  the  methodology  of  Derek  Hatley/Lear-Sleglei'  Including  control 
flow  diagrams,  control  spcclllcatlons.  and  state  transition  diagrams.  See 
Real-Time  in  "r'omidetc  Description." 


r>.  Describe  how  your  system  supports  concurrency,  parallelism. 

Tim  '^ame  -^tructui'es  found  In  Ada  (ta.-^k.  |)ackage.  etc.)  may  be  used  in  i  Ik' 
ProMod  aiialxsls  and  di'sign  jdi.'i.'^es.  'I'liis  is  amplineil  lu  the  I'eal-liiiie  design 
e\I  eiislou. 

f).  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

\o.  Pro.\l(,r|  t|o('^  iioi  eousii'ain  Die  user  lo  aii.x'  j)ai'i  iculai'  1  m  piemen!  a  I  ion  oi' 


7.  Does  you  system  produce  Ada  PDL? 

The  current  Implementation  of  ProMod  consists  ol'  three  phases;  reciulrements 
(lennltlon.  architectural  design,  and  detail  design.  During  detail  design  the 
engineer  will  Identify  input  and  output  parameters  and  specify  the  logic  of 
rhe  algorithm  for  each  functional  component  of  the  system.  The  logical 
speclHcatlon  Is  written  In  a  .seml-formal  language  patterned  after  that  of 
Cain.  Farber  and  Gcjrdon.  Parameter  strings  will  be  checked  by  ProMod  to 
ensure  they  are  of  proper  length  and  type  and  that  they  match  entries 
contained  In  the  ProMod  data  type  dictionary.  I'se  of  Inimt/output  data 
within  the  context  of  the  algorithm  specification  will  also  be  idiecked  for 
consisteiKW'  with  the  parameter  string  declaration.  'I'lie  algorithm  will  be 
checked  for  correct  syntax  and  to  ensure  that  all  dat;i  used  have  been 
declai'ed  appropriately.  Once  a  valid  specirication  has  been  entered.  ProMod 
will  coitvert  It  to  .\da  PDL  using  an  Ada  Code  Frame  Generator.  The  .Ada 
Code  Frame  Generator  translates  parameter  strings  to  \aHd  .Ada  data 
declarations  and  the  algorithm  specincatlon  to  symactieally  correct  .Ada  code. 
The  progratntner  will  need  to  elaborate  the  .Ada  PDL  in  area.s  indliaited  by 
Pr(,).\I'''d  and  supply  lower  level  details  not  found  in  the  specHleatioti.  The 
Ih-o.Mod  .Ada  Code  Frame  Generator  is  currently  :i\'allabk‘  and  is  being  tised 
liy  several  Deitartment  of  Defen.se  contractors. 

8.  De.seribc  how  your  system  supports  life  cycle  iritraphasc  interphase 
coinmunlcatlons. 

Pro.Mod  Is  the  otdy  cotntnerelally  available  t(K)l  that  integi-ates  the  analysis, 
aiadiltect  ni'al.  atid  design  phases.  f^ro.Mod  transforms  the  eotiet-pt  mil  analysis 
ni'aki  to  design  packages.  The  archUectnral  design  pha.se  allows  for  and 
cliecks  the  consistency  of  detail  design  procediiri's.  See  "A  (  omplete 
Devci-iption”  -  The  Tratisformer. 

h.  Is  your  -system  automated,  executable,  compilable? 

The  --ysr'Mn  is  sold  a.s  an  execntitble  pa<d\age  for  the  \’AX  and  IILM  Pti. 

10.  De.scribe  the  graphics  support  for  your  system. 

Tim  aiialisls  plume  is  fully  siijiporied  l)\'  a  graphics  '•dpoi-.  see  "A  (  ompli'H 
( )''"-i-iiiu  Kiu"  -  Olijccfs  Data  (‘'low  Dlagr.aiiis. 
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11.  Describe  how  your  system  supports  concepts  of: 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Iniorrnatlon  hiding 

-Packaging  concept 

-Abstraction 

-Typing 

-Evolutionary  de  /elopment 

-Generics 

-Macros 

-Data  flows 

-Control  flows 

l''pnn:il  speeincntloii  Iniigunges  may  be  used  durUig  the  analysis  phase  to 
i.a’eate  operational  specilK-atlons. 

An\'  part  of  the  aiial\sis.  <l<'sign.  or  code  features  may  be  ex|)orred  and  list'd 
In  (Mher  '•\stems. 

I'l'oMod  uses  the  design  methodology  of  Parna.s.  The  packages  created  in 
the  tii'chlteet ural  design  may  sieare  procedures  but  not  data.  Disembodied 
data  ai-e  not  tillowial  to  flow  through  the  system  design. 

The  primary  fool  of  d<"'igii  used  by  Pro.Mod  is  tlu'  package  or  module.  It  Is 
c(iui\'alent  to  the  .\da  coneeitt  of  package. 

Pi'o.Mod  modfh  the  ^,\-tem  with  data  and  itrocedural  abstractions  at  the 

anal.vsis  phase.  During  design,  objects  and  procediiiTs  art'  encapsulated  in 
Pi'o.Mod  [lackagcs. 

I’l'f'.N  PkI  sii|)poias  ;i  r|ni:i  i\'pe  dlcliouar.v.  It  .-ilso  chetdts  for  t\’pe  consist eiicy 

in  [lackage  i iil ei'ncl ions. 

Pro.Mod  olTers  |■e.•|(llres  to  snppoia  ph.-tsed  de\'elopmenl  and  Integr.alion  of 
design  fi-om  wirloiis  sources  and  ie\ads  of  .-disi  i-nct ion. 

The  i|sc  I ,\'  genei'ife  is  encouraged  by  Pro.\Io(|.  .Actually  excr.x'  Pro.Xlod 
packag"  is  c|ose|-  i()  a  'j.enerlc  spccillcal  ion  than  a  specillc  insi  aiU  ialioii. 

I’l  iMo'il  OIU  '  a.sily  be  used  to  ile'.'elnp  the  i|enuiti('U  of  |u:ic|-os  (  i|'  aU.\  caller 

!"  ■■  y  i 't'  ra  1  u  II  li  llg  a  [lel  racl  ii  .u. 
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See  'A  ( 'oiiipleic'  Deserlpt ion"  -  01).jects  D:ita  Flow  Diagrams 
See  "A  Complete  Description"  -  Real-Time  Analysis 

12.  Is  there  a  paradigm  embedded  lu  your  system?  If  so,  describe  it 
brieOy. 

FriiMo.d  is  based  on  the'  use  of  Structured  Analysis  (DeMarco).  .Modular 
design  Incorporating  alistraction  and  inrormatlon  hiding  (Parnas)  and  program 
ilesign  based  on  a  geneiic  (  nine.  Faidier  and  Gordon  PDL.  and  on  several 
A  la  PDFs  including  Ada  itseU'.  .Vda-DL.  ami  Key  One. 

12.  Destrribe  the  external  t<x)ls  with  which  your  .system  Interlaces  (tool 
compatibility). 

Pro.Mod  pro(luees  AS(  II  Hies  of  all  olglects  and  reports.  Tlie\-  ma.v  l)e 
Ineludcd  In  word  processing  packages,  documeniatic^n  packages,  piaglect 
iiiaiiagemein  packages  and  any  other  tool  capable  of  an  .ASC'll  Intcrrace. 

11.  Describe  how  your  system  supports  hierarchical  decomposition  and  How 
direction  (topdown,  Itottom.s-up,  both,  etc.),  architectural  perspectives  (designer 
cnaitlvity)  :ind  object-oriented  design. 

Pro.Mod  'Uppoi'is  se\eral  ilesP^n  melhoils  including  hlerarcliical  and  objec.a-orl- 
(•iitcd.  s,,.,.  (  omplele  Dcscri|)tlon"  Moduhtr  Design. 

If).  Is  your  systtun  supported  by  rortnal  syntax  &  semantics?  Describe 
brieriy. 

ProMod  d')'’^  lia\'r  a  rormal  S.vniax  Tor  each  object.  This  Is  pro\’id('d  In  a 
P.Vl'  'lyl''  in  tile  ProMod  1  W(.|'s  Guhic. 

It).  Outline  ty[)l(nil  utilization  ctxsts  For  your  .system  (cost  of  actiuiring,  using, 
training,  <'k.  Ftiaintainlng  It). 

r  eal  -y-omi  .,11  P(  -  under  s’lO.ooo 

Total  '.'.'O-III  .,11  \  :i\  -  $■_’().()()()  -  $f)(l. ()()()  (ilcpcilding  on  Oplioua  and  t  \  pc  of 

■  I  ; 

riaiiiin.  -  .'■'1.000  dollar"'  per  day  plu".;  expenses  (.j  or  I'ewi'r  da\s  depending 
11  raiiiiliai-’I '.\i'li  iia  ■!  I  iod(  ..logic-- ) 

<  II  I  i'  ;  ra.ili',:  .|ala  i-  a\’allab|e  upon  |•e(|ues|. 


17.  IiKilcMlo  the  hostablllty  (rncfisurc  of  dcKrcc  of  portability)  of  your 
.systeii\. 

l'i\>Mo(l  Is  available  on  any  IBM  PC.  and  all  DEC  Vax  systems.  The 
system  Is  eompletely  portable  between  \'ax  and/or  PC  systems. 

18.  Describe  how  your  system  supports  lutcrdlsclplluary  abstractlous/represcn- 
tatlons  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

Pi'oMod  is  a  tool  built  for  systems  abstractions.  Clients  currently  use 
ProMod  to  model  coniputer  bcwrls.  and  subsystems  as  well  as  programming 
ab-t  |■a(■Iio[m.  It  is  a  generic  systems  modeling  lextil.  with  a  target  of  pro 
-.rammiim  languages. 

H).  How  compkae  is  the  methodology  -  do  its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  methodology 
-A  management  metholology 
-All  of  the  above 

i ii I  Is  a  complete  software  develoiunent  methcxlology.  'Fills  includes 
rc(|uii'ements  analv'sis.  architectural  design,  (kuail  <leslgn.  ami  pi’Ogrninmlng  (via 
i-fidc  rrainc  genei'aiors). 

1*0.  Describe  how  your  .system  supports  a  teatn  development  approach. 
(Niitnber  of  stations/users). 

l’ro\f)d  is  primarily  used  in  a  teatn  etivlronmcnl.  'Fills  includes  many  usei's 
(ill  a  ''ingle  \'AX.  man\’  P< '  users,  and  most  often,  on  the  V'AX  with  I’Cs 
ii'i'i]  a."  woi'k  "tations.  'Fhe  tool  is  not  limited  to  any  certaiti  number  of 

21.  Describe  how  your  systetn  su()|)orts  design  trade-offs. 

I’l'  '\l''d  wiil  iierfiaaii  roiisist ene_\’  and  other  error  checking  lo  make  sure  the 
liaiig'  j-  irui\'  a  "I  I’ade-off."  h  will  also  provide  reporis  for  acn'sjin.j;  i  pc 
i  I  i  I ;  aei  '  y  I  pe  prop'  sei  1  eliange. 


22.  Indicate  the  rtitige  of  i)robk'ms  to  which  the  system  cat)  be  a()[)lie(l. 


23.  List  the  names,  addresses,  and  phone  numbers  of  rive  (customers)  major 
users  or  your  system. 

Dan  Roy 

Ceil  1 11  r\'  Co  Ill  p  11 1 1  iig 
SlOl  Sandy  Spring  Road 
Laurel.  MD  20707 
301/9.53-3.3.30 

Barry  Gillls 
La.'^ton  Corp. 

().')d-(  Loisdale  Ct. 

Ste.  900 

Spi'lngrield.  \'A  221.50-1872 

703/922-5G00 

Lee  Ti’enr 
'|■^•l('<iyue 

19001  NordliolT  St. 

.Xi'i-tliridge.  C.\  9132-1 

sl8/SS0--_Mi  Ext.  203-1 

(’ar  Miii.Miinn 
Mea.siii'PX 
1  Results  Way 
(  ilIieiTliio.  ( '.-V  9-501-1 

10''/ 2.5.5- 1.500 


Ci-'"j;g  Reed 
Slniniond.s  Precision 
Panion  lioad 

\5'i'yeniK's.  \'ei'inont  05-191 
S02/S77-291  I  F-iXt  2578 


Wcsriusiliouise  Electric  Corporation 
Defense  Group 
Friendship  Site 
Box  1693 


Westlnghouse  Electric  Corporation 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

The  SIDE  Facility  supports  early  detection  of  Inconsistencies,  closures,  and 
errors  both  explicitly  In  Its  design  and  Implicitly  by  Its  Implementation.  The 
SIDE  Facility  Is  based  on  a  graphical  methodology  that  enables  users  to 
visually  check  for  Inconsistencies  and  completeness.  The  underlying  program 
also  checks  for  type  consistency  and  errors  while  creating/modHVing  an  AD.M 
graph.  This  checking  Is  further  enhanced  through  use  of  an  .\1  language  and 
frame  representation  of  the  data  objects.  This  iyi)e  of  rei)resentatlon  lends 
itself  easily  to  a  logical  checking  of  a  graph  as  It  Is  being  created/modined. 
Figure  1  (on  the  following  page)  depicts  an  example  frame  representation. 

2.  What  type  of  progress  metric  does  the  system  produced  Is  It  quaritin- 
able  measure  of  completeness? 

'I'he  user  may  check  graph  completene.ss  at  any  point  ol'  graph  creation  and 
modincatlon.  .\t  this  time,  the  program  will  list  an,\-  unconnected  entities,  as 
well  as  any  unset  attributes  that  are  neces.sary  for  graph  completeness.  This 
iiifornnttlon  could  ettslly  be  used  to  generate  a  quantinable  measure  of 
(•omi)letc‘ue.ss.  This  capability  could  also  be  extended  to  se\’cral  le\’pls.  to  not 
only  check  cotnpleteness  at  the  graph  level,  but  to  check  if  underlying  (child) 
nodes  of  the  graph  exist  In  the  library  or  must  l>c  either  created  or  modlHed 
to  match  tlie  abstract  tiode. 

2.  Describe  how  your  system  supports  documentation,  program  maiiageincnt 
and  control. 

The  SIDE  Facility  supports  docutneiitatlon  tlirotigli  several  methods.  A 
plottei-  is  us('d  to  generate  a  picture  of  the  grtipli.  ineluding  its  nodes  rutd 
|■oune(■tl\•i^.v.  The  facility  also  j)roduces  tables  lliat  desciibe  each  of  tltt' 
iioi|e'>  and  tlie  (lueiies  that  connect  them.  Tlie  early  Implementation  also 
outputs  the  Prolog  databa.se  for  the  given  graph. 

-1.  Describe  how  your  system  supports  real  time  design. 

t)iii'  of  the  driving  factors  behind  rite  SIDE  I'.aeillt.x'  ha.s  ((ecu  to  proxlde  a 
^latf  of  the  art  real  time  design  facllit\-  that  siipiioris  l  hi‘  ADM  design 
met  hodology  stinalug  :it  systems  reciuiremeiits  and  t  raiisctuidliig  the  <le\c|op- 
iiiciii  path  tlii'oiigli  module  or  proc(-ssor  design.  'I'Ik'  uuderl\'liig  data  flow 
iii'i  ho.  |olo.p\  iiupliciily  supports  |•(■al-llml'  dc\'e|opm<'n  I .  Anrlbiiti-s  ha\i'  been 


Figure  1.  A  frame  representation  of  a  graph  containing  4  nodes 
points  to  frames  that  contain  information  on  each  of  the  nodes  in  the  graph 
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predeHned  but  the  user  may  add  any  attributes  that  deniu'  liN  system. 

These  attributes  are  used  to  describe  parameters  such  as  input  rlata  rates, 
the  flow  ot‘  data  between  nodes,  and  the  type  oi‘  proce-ssing  at  each  node. 

graph  simulator  can  be  used  to  verll'y  that  the  dellned  graph  meets 
real-time  reciulrements  In  a  single  or  multlproce.sslng  environment. 

5.  Describe  how  your  system  supports  concurrency,  parallelism. 

Parallelism  is  an  Implicit  feature  of  the  Application  Description  Methodology 
with  Its  data,  flow  concept.  .Nodes  represent  proce.sslng  elements  that  are 
defined  Independently  and  may  execute  Independently  of  each  other.  node 
Is  ready  to  execute  when  each  of  Its  Inports  have  data  equal  to  oi‘  greater 
than  the  threshold  attribute  for  that  luport. 

ADM  also  supports  concurrency  In  graph  defnltlons.  For  example,  node 
may  prove le  Input  to  node  B  at  a  rate  faster  than  node  B  can  process.  To 
solve  tills  problem,  no  copies  of  node  B  execute  concurrently.  The  data 
output  from  node  Is  switched  after  each  execution  to  a  copy  of  node  B. 

In  a  cli'cular  fashion,  and  then  recombltied  by  a  node  that  recehes  an  Inimt 
from  each  of  the  node  B  coiiies. 

(5.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

The  .Vppllcatlon  Description  Methodology  is  a.  graphical  desci’lptlon  methodolo¬ 
gy  that  Is  language  Independent.  It  uses  graphical  constructs  coupled  with 
textual  descriptions  to  defne  a  iirocess.  The  databa.se  representation  Is  then 
used  to  generate  .\da  speclfcatlons  that  can  be  complied  and  executed.  This 
language  was  chosen  to  comply  with  DoD  initiatives  because  of  its  da.ta 
typing  and  constructs  but  the  data  base  could  be  used  to  generate  speclfca- 
tions  for  another  language. 

7.  Dexts  you  system  produce  Ada  I’Dlj? 

h'es, 

8.  DescTibc  how  your  system  supports  life  cycle  Intraphase  &  Interphase 
communications. 

I’ccaMse  of  (he  hlf'i'ai’idilcal  '^truetiiro  of  .\D.M.  interphase  life  c\'cle  eommimi- 
cailon  siipiioia  Is  provide  by  the  multi-levels  of  a  graph  and  Its  node.  If  a 
rliaiiae  is  made  lo  a  node  at  the  top-level,  this  change  will  be  ri'fleeled  al 
the  Alla  I’DI;  desiaiptlon  Uwel  and  then  .at  'lie  detailed  level  underl\1ng  the 
nod''  delTihlon.  Inrrapha.se  l•ommnnicalion  K  supported  b\'  derinllion  of 
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,\DM.  If  a  node's  atnibntes  are  changed,  any  nodi’s  connected  to  tlie  node 
must  also  be  inodined  If  their  Interconnect  Is  affected. 

9.  Is  yonr  system  automated,  executable,  compilable? 

A  main  objective  of  the  SIDE  facility  has  been  to  Increase  engineers’ 
l)roductlvUy  and  eftlclency  through  the  use  of  automation.  Once  a  graph  Is 
completely  defined.  .\da  code  can  be  automatically  generatefi  from  the  gra|)h 
description.  This  code  Is  valid  and  can  be  compiled  and  executefl  In  any 
MIL-STD-Ada  environment. 

10.  Describe  the  graphics  sup[K)rt  for  your  system. 

A  driving  thrust  behind  the  SIDE  facility  hits  been  to  use  graphics  to 
provide  a  user  friendly  envlrouinent.  This  Is  done  Implicitly  through  the  use 
(d’  ADM.  a  grapihlcal  representation  language.  In  the  earlier  versions  of 
SIDE,  a  color  graphics  terminal  wms  u.sed  <ts  the  Interface  to  the  SIDE 
facility.  Pop-up  menus  and  actual  granh  drawings  were  a  main  feature  of 
the  pr(;gram.  'I’his  system  Is  now  being  upgraded  for  a  LISP  machiin' 
en\lromnent .  'flie  old  features  will  be  includetl  along  wdth  multiple  windows, 
atid  the  use  (tf  user  aids  such  as  a  mouse  will  be  supported. 

11.  Describe  how  your  .system  supports  concepts  of: 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-I’ackaging  concept 

-Abstraction 

-Typing 

-Evolutionary  development 

-Cencrics 

-Macros 

-Data  flows 

-Control  flows 

Eigui'c  ■_>  (on  the  I'ollowiiig  page)  shows  the  overall  SIDE  faeirit\'  concepi. 

.\I)M  (Application''  rtescriptlou  Met  luxlology )  is  a  graphical  represem  at  ion 
ianenage  used  by  a  sysrenis  euginet'r  lii  the  develoiunenl  of  systi-ms.  The 
engineei'  Uses  ADM  111  boi  h  the  re(|ulrements  and  the  design  phases  of  sysicin 
de\ elopiiieni .  The  need  for  a  graphical-l)as('d  represent  at  ion  has  diwclopeil 
from  I  Im  limiiaiions  of  piirel\-  textual  languages.  (Irapliical  langnage--  proxide 
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Figure  2.  The  overall  SIDE  concept  consists  of  reuseable  libraries 
and  uses  a  graphical  input  based  on  ADM  to  create  the  central  database. 


lioth  the  desi'^nei-  and  tlie  user  a  iiu'cliuiu  Tor  representing;  struct ui-e  coherent¬ 
ly  and  with  vaiain^  levels  of  detail. 


ADM's  basic  structure  resembles  that  of  a  data  How  diagram.  It  consists  of 
nodes  and  arcs.  The  nodes  represent  functions  and/or  objects,  whereas  tlie 
arcs  depict  the  connectivity  and  flow  of  tlie  graph.  Each  node  must 
I'eprt'sent  an  executable  module  or  a  subgraph.  A  subgraph  also  contains 
nodes  and  ai'cs.  again  allowing  Its  nodes  to  represent  executable  modules  or 
subgraphs.  A  graiih  level  is  dellned  when  every  node  Is  associated  with  a 
subgraph  or  an  executable  module.  The  system  graph  Is  complete  when 
f\'er\'  levt'l  of  tile  gi'aph  is  denned. 

since  graidis  |■epresent  flow,  they  also  depict  s\-srem  structure.  Textual 
languages  are  lua  g(x)d  representations  of  structure,  however,  they  are  gcjod 
reiu'esentations  of  detail.  The  nodes  of  a  graph  are  only  abstractions  of  the 
functions  t  he\'  represi-nt.  hence,  each  node  will  have  a.ssoclated  text  descrilVmg 
the  iK^de.  'Fills  association  allows  ustu's  to  view  and  comprehend  all  levels  of 
the  graph.  If  the  text  a-ssociated  with  a,  given  node  does  not  provide 

sufficietit  detail  for  the  user,  s/he  can  examine  Us  subgiaii'h. 

ADM  facilitates  the  ability  to  design  and  review  in  a  top-tlown  manner.  'Fhe 
structure  of  the  graphs  allow  both  the  designer  and  the  reviewer  (user)  to 
ai'pi’oach  the  graph  with  varying  Itwels  of  detail.  The ‘top-level  graphs 
'generalize  the  processes  and  data  transformations  within  the  system,  wherea.s 
the  lower-level  graphs  repi'csent  the  increa.sed  detail  of  the  system.  Parsing 
the  graph  r'fovides  increasing  dettill  of  the  system  processes.  'I'herefore.  the 
graph  incorporates  and  provides  t  lu'  leal  tires  of; 

-Information  hiding 
-hierartdilcal  st  met  tire 
-reparation  of  concerns 
-toj>-i  lown/l)ot  tom- up  I iesign 

I  ■iilikf  pure  textual  laiigiiagi’s.  ADM  dlrectl\'  provides  a  met hodolog\’  for 
'icp-Nslsi-  relliienuMii .  'Fhe  dorpyiier  msy  begid  system  devadopmeni  by 
■p''rii'y]ii.j,  iii-oi-csres  as  high-level  al)st  fact  lolls,  then  flirt  her  rerim.'  I  he  design 
•.ia  till'  "nP-mciilis.  'Fhe  user  also  beiiellts  lYom  Ihis  development  approach. 
Ircaaii.si'  -/lie  can  I'eeiew  Hie  syslem  at  each  level  which  It  w;is  developial. 
Parsing  the  nesie'l  si  riici  lire  of  Hie  graph  provides  ipilck  access  to  desired 
a'.ep  of  detail.  pe\de\\iug  the  text  associated  with  the  ileslred  ni'de  provides 
I' '-cri  I  a  i'  1 1-  of  the  node  -  ciciraei  eri-i  p-s  and  an  explanallon  of  its  ure.  ddie 
:.vt  [  ro\ii|i--  Hie  dese|(  ,j  ici’  |)||.  re(|ilirenieul  s  of  a  IHxle's  -llbgrapll.  It  also 
|||'  a.  Id'  I  he  U-er  all  o\ei'\ic\\  (  .f  Ipe  U  1 1 1  |e  r  I  \'i  1 1  g  - 11  b- p  I'ocesse- .  wilhoUI  Hie 
m  ail  '  ■[■  1  !['■  aei  nal  -I  rue!  are. 
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Miuiy  system  il.'siyners  utilize  data  flow  diagrams  during  development.  Using 
(  ominiter-Aided  Graphics.  .-VDM  can  simulate  this  development  methodology. 
.VidM's  hmsis  is  data  flow  representation.  Introducing  control  How  In  a  concise, 
simple  inannei'.  Introducing  the  constructs  for  control  flow  provides  two 
henents; 


-providing  control  flow  wdilch  Is  documented  and  relatively  erisy  to  use. 
-ensuring  a  standanl  usage  of  the  constructs  to  Increase  understand- 
alVillty  among  users. 

ADM  not  <'nly  allows  the  (kweloper  to  design  systems  using  standard 
const I'ucts.  hut  also  tests  new  connguratlons  to  ensure  they  follow  the  rules 
l\.r  cretitlng  grtiphs.  'Phe  graphical  structure  of  the  language  aids  In  ensuring 
'•( iinplcteness.  consistency,  and  connectivity  of  the  system.  Once  a  system  Is 
ilesigned  using  the  .\DM  meihodoltygy.  the  system  engineer  tloes  not  have  the 
hurd'  nsome  ta.sk  of  checking  for  consistency,  completeness,  and  connectivity 
as  s/iic  may  with  a  textual  specincatloii. 

Using  a  (UVD  facility  provides  <|uicker  ileslgn  and  access  than  conventional 
haml-writteu  aiiproaches.  I'he  GAD  facility  Is  capable  of  storing  the  struc- 
Mirc  of  the  graph,  nesting  Information,  parsing  algorithms,  organizing  text, 
poiu  I’aying  the  I'econfiguratlons.  and  other  data  liase  related  tasks.  Wll-h  the 
i-clli-r  of  tliese  responslhllUles.  the  designer  can  devote  more  of  hls/thelr 
'■ITorts  toward  the  actual  design  process. 

ADM  allows  Us  com[)onents  to  l>e  created  and  nu.Mlined  Independent  of  each 
■fhei'.  'Phis  principle.  'st“|jara( ion  of  concerns',  ttllows  the  system  to  he 
organized  ami  divided  Into  seftarate  units.  It  provides  greater  flexibility  since 
[Is  moilincailous  are  well-confined.  It  also  provides  the  essential  groundwork 
for  '-ecm-|t\-  among  development.  Nodes  which  incorporate  chtssined  informa- 
lifiii  i-aii  he  ile\e|ope(l  separately  and  refuse  exaiuina.tlon  to  atiyone  without 
aie-e-.-,  prU'ileges. 

I'iie  ADM  met  hodo|()g\'  Is  implement  at  ion  independent.  'Phat  is.  AD.M  doc-s 
ae-i  |•e'..M■icI  which  language  i  he  noilc  implementations  are  written.  'Phe 

le\i'|  nodes  are  a  hsi  I'act  ions  of  the  exi'cntahle  modules.  'Phe  I'xecuiahle 
iii-idnl's  are  olyeci  modules  written  in  any  source  language  chosen  hy  the 
■  naiiieer.  lienee.  VDM  doe";  noi  di’peiul  upon  the  knowledge  of  an.\’  gham 
hnivnaoe  a  .le\e|<.[,  s.\"-ii'm'.  ADM.  due  to  Its  graphical  basis,  can  he 
I nde „  id  li\  ( iC' rara III mers  as  \ie||  as  non-prograiiiiners.  'Phis  aids  in  closing 
'll-  e,-  i|,  III '  mieai  ion  -aji  heiweeii  leeUnleal  aiid  inanag  nient  personnel. 

I'Oiif,  w  ■  1 1 1- :  1 1 1'f  11"  li  -  and  de'-lLMi  re',le\ve  can  become  more  produclixe. 


As  a 


AHM  ii.'Siinies  the  Kwest.  level  nodes  to  be  nssoclat c(.l  with  executable 
iiuiilules.  'I'he  code  which  links  and  Interfaces  between  the  niodtiles  will  be 
e.  iierated  by  the  ADM  language.  Originally,  the  Interface  code  will  be 
e'-ncrated  In  Ada.  however,  this  Is  not  to  Imply  Ada  Is  the  only  language 
which  ADM  supports.  The  Ada  code  generatetl  by  the  ADM  language  can 
br  manipulated  by  a  common  editor.  This  provides  the  flexibility  and 
'ti'fiigth  of  the  Ada  language  which  /VD.M  may  not  provide.  By  generating 
tic  interface  code  between  the  modules,  the  probability  of  error  a.ssocl;tted 
•Aitli  huinait-generated  code  will  disappear. 

To  facilitate  the  collection  of  executable  modules.  .ADM  will  link  to  a 
ii-mable  library  of  modules  and  routines.  This  llbrar.v  will  be  accessed  by  a 
■■library  asslstanf.  The  assistant  will  examine  the  i-eciulrements  of  the 
iipctlcd  routine  specified  In  the  .ADM  graph,  then  proceed  to  Hud  a  suital)le 
maoh  within  the  library.  The  pro,toty[)e  to  be  developed  for  the  October 
lt)s()  IK’A'D  presetitation  will  not  Include  the  library  ctsslstant.  If  support  for 
the  project  continues  In  1987.  the  assistant  can  be  developed. 

12.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  dcstTlbc  It 
briefly. 


The  paradigm  etnbedded  In  the  SIDK  facility  was  developed  at  WE(,'  and 
riillcd  Directed  Graph  .Methodology  (DGM).  This  methodology  was  based  on 
pnire  data  flow  and  therefore  .\pi')llcatlon  Description  .Methodology  has 
expaniled  on  DG.M  to  Include  control  flow. 

12.  Describe  the  external  tools  with  whicli  your  system  Interfaces  (Ux)l 
compatibility). 

d'lie  ''IDlf  facility  Interfaces  to  the  following  I(K)|s: 

Ada  compiler. 

I'd '.s.s  II  System  Simulator 

ITdO.A  siniulalor 

\D,M  <ira|)h  Simulator 

11.  D(;scrlbe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
crcuillvity)  and  oblect-oricnted  design. 

'i  111  '-'IDIf  f'li'i 111 'iipports  hli-rai^chlcal  decom|K>slt ion  by  dcnuiiiou  ol^  the 
.  i  :i|  hii  ai  b-a.'-i'd  uiiu  lii (dolog.v.  .V^  mentioned  carrK'r.  ADM  support''  K'p-dou  n 
c.i  il  :i>  i .i  1 1 ( a ii- 1 i p  design.  'The  designer  can  cri'alc  high-level  nodi"'  llr^i. 
Ill  a  I ,  I  •,  I  i,,  d' '!■' !ni  pose  them  into  respective  si  1 1 1  a.sk'' ,  namely  i('p-do\\u 

can  alc(,  ''elect  the  dc'-ired  |o\\-lcvi'l  routine',  and  link 
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tUeia  to  create  the  lil^ti-level  processes,  namely  bottoni-up  deslt^n.  Alloulicc; 
l)Oth  directions  of  approach  pr  )vkles  the  flexibility  most  desh^ners  retiulre.  In 
reality,  most  designers  Incorporate  both  approaches  when  designing  a  system. 
There  are  no  limitations  on  the  graph  representations  since  the  user  can 
create  his  own  attributes  to  describe  a  given  system.  .\DM  was  originally 
targeted  for  real-time  mnltlprocesslng  applications,  but  the  nodes  can  be  used 
to  represent  any  type  of  object  and  the  attributes  needed  to  descrllie  that 
object  can  be  (letlned  by  the  designer. 

15.  Is  your  system  supported  by  formal  syntax  &  semantics?  Describe 
briefly. 

The  ADM  language  ('(insists  of  few  constructs,  providing  bcgiiinei's  the  aliilbx' 
('f  quick  use  without  hours  of  letirning  the  syntax.  The  language  is  broken 
into  four  ba.^^lc  constructs,  consisting  of  eight  distinct  icons: 

Data  Node  'r\-pes  (see  Fig.  :t) 

-Solid  (.Ircle  -  Ititernal  Data  Transformation 
-S(.)nd  S(|uare  -  Fxternal  Data  Transformation 

(-'oiitrol  Node  ’IF'pes  (see  Fig.  -1) 

-hlyphetiated  Circle  -  Ititernal  Control  Transformation 
-H>Tdietiated  Circle  -  external  Control  Transformation 

Flow  'fyiies  (see  Fig.  5) 

-''olld  Arrow  -  Datti  Flow 
-Hy[ilienated  Arr()w  -  Control  I'low 
-(  ircle  w/\'al\'e  -  Flow  Control  X’alve 

Data  Stc )|';|ign  (see  [-'Ig.  0) 

-parallel  Fines  -  D;Ua  Store 

The  l'o||(i\\ing  xcctions  describe  eatdi  of  tliesc  const  riu'i  t  \  pcs. 

I ’ll  a  Node  'r,v))es:  Data,  t  ratisformatioiis  cati  produce  onit'  data.  A  pure 
data  '  ransi’Mi-nnit  ion.  consisting  of  lioth  input  and  outimt.  N  cieplcted  as  a 
sir'-i"  di'awn  with  a  solbl  Hu<'.  It  must  coiisutuc  Itiput  and  produce  out  put. 
The  input  consnnie<l  i-an  be  either  data  or  control  signals.  The  output 
I’l'  dne^  d  nm-i  !)(■  onl>’  data.  These  data,  t  ransronnat ions  are  l■(.ln'illerl  d 
iiio  I  'lal  iu  i-.in-e  I  he>'  rely  on  input  and  iirodnce  ontpnt. 

F  a  11'  d"  I'PliiT  pi-oilnci"--  insi  data  out  I'Ut  'a'  consumes  an\'  inpni.  iaii  n<'i 
:■  Fi.  'Ii’  ii  it  i-  'oiisj, Icfc. I  :in  exicfnal  data  node.  An  '-xiciaial  data  no(|c 
aFiarj  ■,  ni]:ir',  ilra\\n  with  -olid  lilies.  \,  ni'-ni  t  .ni-d.  'xicfnal  data 
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AOH  CONSTRUCTS 


Data  Node  Structures 

Solid  Circle: 

internal  data  transfonnation 
l,e.  number  crunchers 
device  controllers 
restrictions : 

must  accept  either  signal(s)  or  data 
&  produce  only  data 


Solid  Square: 
external  data  devices 
i.e.  sensors,  weapons 
restrictions; 

must  accept  input  or  provide  output, 
but  not  both 

Figure  3  -  Data  Nodes 


Control  Node  Structures 
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Hyphenated  Circle: 

Internal  C'':jtrol  transformation  - 
(control  logic  node) 
restrictions : 

must  produce  a  signal  i  accept  an 
input  (signal  or  data) 
may  produce  data 

Hyphenated  Square: 
external  control  construct 
i.e.  switch,  timer  error  handler 
restrictions : 

must  produce  signals,  may  produce 
data,  no  input  allowed 


Figure  4  -  Control  Nodes 


Data/Control  Flow 


—  -> 


Solid  Arrow: 

Data  Flow  - 

discrete  values  produced  by  any  of 
the  above  constructs  are  queued 
(if  necessary) 

Hyphenated  Arrow: 

Control  Flow  - 

values  sent  controlling  execution 
will  have  signal  types: 

*  event  -  Immediate  recognition 

*  synchronization  -  processes  wait 
for  other  processes  to  "catch  up" 


Va 1 ves 


Circle  containing  a  Valve: 

Control  Valve  - 

control  structure  placed  on  data 
arcs  enabling  or  inhibiting  data 


Data  Storage/Buffers 


Figure  5  -  Flow  Constructs 


Parallel  Lines: 


Data  Store  - 

Storage  area  for  generated  variables 
and  access  area  for  global  variables 


Figure  6  -  Data  Storage 


nodes  dllTer  froin  internal  data  nodes  (transformations)  In  they  must  not 
contain  Itoth  litpiit  and  output.  \vherea.s  Intertial  data  nodes  do. 


Any  data  node,  either  Internal  or  external,  has  the  same  associated  attributes 
The  user  need  not  know  the  vahie  for  each  attribute  upon  Initial  desltiii. 
s/he  has  the  flexibility  to  assli^n  a  value  to  any  attrlbtite  at  any  time  durltuj 
the  developmetu  process,  d'he  default  attributes  with  a  data  node  are: 


-Natne 

-'I'extual  description 

-Priority 

-Delay 

-Porcer 

-Subscript 

-Atomic 

data  imports 
data  exports 

Each  node  of  a  ttrnph  represents  a  library  module  or  a  sub!;raph.  Eveiw' 
node  must  have  a  name  indUaitlmj;  the  operations  the  node  perlbrms.  If  two 
tiodes  shcaild  perfortu  the  same  operatioits.  they  may  ha.\'e  the  same  name. 

Hciwever.  it  Is  not  recommended  tluit  two  nodes  have  tlie  same  name  If  t  lie.v 
f)erforrii  different  aperniion^. 

Data  nodes  tnay  ha\'e  ilata  input,  'fhc  number  of  data  input  i)arameters  is 
-et  by  tlie  itser.  Associated  uPh  each  Data  Import  will  be  its  a.ssociated 
rea(.l  ;itt  rlbutes.  'I'hese  huixtrt  values  too  imtst  be  set  b\'  th(‘  user,  but  will 
a.ssume  default  values  if  not-  set. 

Internal  Data,  nodes,  as  well  tis  external  data  nodes  without  Inpitt.  must  ha\c 
ihita  out[iur.  'Phe  number  of  data  output  parrimeters  is  stu  Ity  the  user. 
.\,''Soe]ate(l  with  eatdi  Data  l-lxport  will  be  its  a.ssoclale<l  write  attributes. 

'Fhe'-e  export  \alues  too  must  be  ^-et  by  the  user,  but  wdll  a.ssume  default 
\  allies  il'  not  ^et. 


.Ns^-oeiated  with  eaeh  data  I  raiisformal  ion  will  Ik'  data  inpui.  I•dlch  data 
input  pai'ameier  in  a  node  has  Us  own  a.ssocial e(l  attributes.  The  default 

allrlbutes  llirlllde; 
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Re:nl_algoiitlim 

Inltlallzalile 

Datatype 

X'alve 

Control  Node  Types:  All  control  nodes  niiist  produce  control  signals  and 
may  produce  data.  Internal  control  node  accepts  both  data  and  control 
-signals  as  Input.  It  Is  depicted  as  a.  hyi)lienated  circle.  .-Vn  external  control 
node  (k^es  not  accept  any  Input.  It  Is  depicted  as  a  hyphenated  sciuare.  A 
conti-o!  node  Is  used  to  control/direct  the  flow  of  data  and  control  the 
execution  of  specinc  nodes. 

Slgn:ils  can  simulate  intei'rupt  opeimtlons  and  stuichronlzat Ions  between 
iu'ocesses.  They  can  be  activated  as  well  as  deactivate  processes.  If  a  node 

is  deactivated.  Us  a.ssoclated  input  data  may  be  delete<l  or  saved.  A 

deactU'ation  signal  sent  to  a  node  transmits  Its  signal  to  the  nodes  associated 
data  iniuit  valves.  Hence,  a  deactivation  closes  the  initut  valves  of  a  node. 
Assochited  with  a  deactivation  is  its  save  state.  If  It  is  true,  the  data  on 

the  ininit  data  (lueues  is  saved,  if  it  is  false,  the  dai:i  on  the  input  data 

(lueties  is  ileleted  until  the  save  value  is  reset  to  true. 

Control  nodes  have  the  same  attribute  Helds  tus  data  nodes,  with  an  tiddltioii' 
al  Held  of  control  signals  produced.  Control  Signal  attributes  are  described 
via  the  control  arc  attributes,  d'he  control  arc  attributes  are  discussed  in 
detail  in  the  below  section  -  Control  Arcs. 

flow  I'ypes:  Data  arcs  are  simply  names  a.ssoclated  with  the  riumies  which 
collect  discrete  data  elements  alotig  a  path.  'I'lie  atirilmtes  a.ssociated  with 
dat:i  arcs  designate  the  source  atid  destination  points  (T  the  arc.  as  well  as 
the  (opacity  of  this  (lueue.  Mfuice.  the  delaiilt  at  I  i-ibutt'S  a.ssociated  with  a 
data  arc  are: 

Name 

source  -  Hxpoi't 
De'~tin;ition  -  Impoi’t 
(  'a[)acif.v 


Some  examples  of  MIDSS  "exja’rts"  inclu<le  advisors  in  constructing  opei’alion- 
al  algorithms,  sopwai'c  mapping  cx|ierts  lo  mai'  the  opei-atiomil  nodes  onto 
\d:i  procedures,  and  hardware  mapping  ex|)erts  that  map  tin-  Ada  procedure- 
and  hardware  mapping  experts  i  pat  m:ip  the  Ada  pi’ocediires  onto  different 
hardw  are  coiingiirat  loiis.  '['here  ma.\'  iilso  bi-  experts  lo  address  xoi'iware 
reiisabiliiy  and  to  pci'foriii  siniiilal  ions. 


16.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

The  utilizations  costs  are  TBD. 

17.  Indicate  the  hostablllty  (measure  of  degree  of  portability)  of  your 
system. 

The  first  version  of  the  SIDE  facility  was  linpleniented  on  a  V.\X  11/780. 

The  grajihlcs  user-inlei'face  was  written  In  Ada  and  the  data  biise  fraine 
rf-pres('ntntion  was  written  In  Prolog. 

rile  cm-i'eiu  iinplenient ation  will  he  completed  on  a  LISP  machine,  using 
common  LISF’  and  an  expert  system  btilldlng  tool  written  In  LISP.  'Phis 
\aa-'ion  will  ultimately  he  hosted  In  the  \'.\X  enx'lromnent . 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/represen- 
tations  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

\ii  ADM  gi-a|)h  can  he  used  to  represent  any  level  of  abstraction.  The  node 
ami  arc  attributes  are  then  used  to  tloftic  the  graph  le\'e|.  One  objective  of 
the  "'ll)!.;  facility  is  to  integrate  systems  tle.slgu  by  mapping  the  higher  level 
iic-dc  ab'-iraction  onto  both  the  software  and  hardware  modules  In  oialer  to 
coiingure  a  complete  system. 

11).  How  complete  Is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  methodology 
-A  management  methodology 
-All  of  the  above 

\i  I  he  pi'ociit  lime,  the  SIDE  facilit,\’  (Muiiodies  a  developmeni .  design  and 
pi'oarammiug  met  hodolog.v.  It  does  not  emaamtly  euibod\’  a  project  cont  i'ol 
or  iiiauaaement  met  hodolog.x’.  luit  it  can  be  extended  to  include  these  also. 

20.  Describe  how  your  .systetn  supports  a  team  development  approach. 
(Number  of  stations/users). 

The  s||)|-i  fncility  supports  a  teatii  de\’f-|opm<mt  approach  hot  It  ph,\sii-all,\'  attd 
io”  ic'i  1 1  \  .  \  eeiitral  (lata  base  is  (U'ealial  I  liat  is  accessible  liy  a  number  (h' 


liters. 
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The  (lata 


I  lata  Intetti'Uy. 


can  be  niaile  read  only  except  to  privileged  users  to  protect 


Loglcall>'.  a  dellned  graph  consists  ol’  several  nodes,  which  can  be  indepen- 
ileiuly  developed,  r’rotections  may  be  set  so  that  the  designer  of  a  given 
graph  node  ha.s  complete  access  to  the  node  data  base  and  only  read  options 
for  the  other  nodes  In  the  graph. 

‘21.  Describe  how  your  system  supports  design  tradc-ofl’s. 


Once  a  graph  is  completed,  a  graph  or  ECSS  II  simtilation  can  be  perrormod 
lo  measure  s.vstem  perlormance.  It  Is  then  easy  to  change  a  node  or  its 
chai'acteristlcs  in  the  racillty  and  have  that  change  fllter  througli  the  design. 
Simulations  is  then  used  to  see  the  elTects  on  the  system. 


‘22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

Tile  slDI'.  racillty  has  been  targeted  to  support  real-time  multiprocessitig 
applications,  but  the  methodology  is  not  limited  to  these  applications.  For 
examine,  the  SIDE  s\stem  can  be  used  to  describe  multiprocessing  architec- 
tiiri's  by  using  irales  to  represeiu  hardware  modules,  and  the  arcs  to 
represent  data  and  control  buses.  The  node  and  arc  attiibnies  would  tlien 
dc'^cribe  processor  and  bus  characteristics,  respectlvel.v. 

‘22.  Idst  the  names,  addresses,  and  phone  numbers  of  five  (customers)  malor 
u.scrs  of  your  system. 

The  s|Di-;  raclllt\'  has  not  currently  been  commercialized  and  nutrkeKal. 
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TASC-The  Analytic  Sciences  Corporation  (AdaGRAPH) 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

A  wide  variety  of  design  inconsistencies  and  errors  are  prohibited  by  Ada- 
GRAPH's  (AdaGR-APH  Is  a  trademark  of  The  Analytic  Sciences  Corporation) 
construction  rules.  No  direct  support  for  closure  Is  provided. 

2.  What  type  of  progress  metric  does  the  system  produce?  Is  It  quantifi¬ 
able  measure  of  completeness? 

Completeness  checking  of  AdaC^FCAPH  designs,  either  an  entire  design  or  any 
subtree  of  the  design.  Is  accompanied  by  a  percent  completeness  metric. 

This  metric  Is  based  upon  all  attributes  of  AdaGRAPH  design  objects. 

3.  Describe  how  your  system  supports  documentation,  program  management 
and  control. 

Documentation  Is  supported  by  the  production  of  a  variety  of  reports: 

o  graphical  and  textual  module  maps 
o  design  graphs 
o  completeness  analyses 
o  global  and  local  data  dictionaries 
o  Ada  PDL 

o  various  other  textual  views  of  modules  (requirements,  specs,  .  .  .  ) 

Program  management  and  control  may  be  enforced  by  the  definition  and  use 
of  predenned  .Ada  data  types  and  program  unit  Idioms.  .Any  policies  may  be 
checked  by  means  of  the  data  dictionaries  within  AdaGRAPH.  Management 
metrics  may  be  ti-acked  In  management  views  of  modules. 

-1.  Describe  how  your  system  supports  real  time  design. 

Real-time  design  Is  supported  l)y  directly  graphically  modeling  the  ta.sklng 
a.spects  of  .Ada.  and  by  representing  the  Interaction  of  an  .Ada  system  with 
the  operatloiial  envii-oninent  In  real-time  terms  (e.g..  external  Interruitts). 


5.  Describe  how  your  system  supports  coDCurrency,  parallelism. 

AdaGR\PH  supports  parallelism  and  concurrency  by  graphical  rendezvous 
attributes  within  the  graphical  editor,  and  by  translation  of  processes  and 
their  attributes  Into  Ada  tasks. 

6.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

\'es.  at  present  AdaGFL-VPH  supports  Ada:  however.  It  could  be  used  as  a 
design  tool  for  other  languages  which  support  strong  typing  and  tasking  (such 
;is  Co:tcurrent  C). 

7.  Does  you  system  produce  Ada  PDL? 

^'es.  It  produces  an  Ada  PDL  automatically  from  a  graphical  system  design. 
The  PDL  produced  Is  compilable  and  executable. 

8.  Describe  how  your  system  supports  life  cycle  Intraphase  &  Interphase 
communications. 

AdaGFL-VPH  is  intended  to  ttsslst  In  the  capture  of  requirements  by  dataflow- 
techniques.  and  to  support  the  high-level  and  detailed  design  phases  which 
follow  by  allowing  the  user  to  traverse  the  dataflow  diagrams  annotating  the 
design  components  with  ever  more  detailed  software  Information  (such  its  call 
decisions,  data  types,  etc.).  In  this  way  the  transition  between  the  three 
phases  may  be  arbitrarily  deHned  by  the  user.  Transition  to  coding  occurs 
at  the  direction  of  the  user. 

9.  Is  your  system  automated,  executable,  compilable? 

'I'ps:  .XdaGRAPH  Is  automated,  and  It  produces  compilable  and  executable 
textual  .\da  PDL. 

10.  Dc.scrlbe  the  graphics  support  for  your  system. 

.XdaGR.M^lI  Is  ba.secl  upon  the  Graidilcs  Environment  Manager  (GEM  Is  a 
iradeinark  of  Digital  Research.  Inc.)  which  Is  similar  In  appearance  to  the 
Macintosh  interface.  it  Is  a  mouse-driven  system,  using  drop-down  menus. 


11.  Describe  how  your  system  supports  concepts  of; 


-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-Typing 

-Evolutionary  development 

-Generics 

-Macros 

-Data  flows 

-Control  flows 

AdaGRAPH  Is  a  process-oriented  design  system  for  .Ada.  .As  such  It  has 
direct  support  for  data  flows  and  control  flows  as  arcs  within  designs. 

Control  and  data  flows  are  not  distinct  arcs:  a  control  flow  Is  represented  as 
a  iniranieterless  data  flow,  or  as  the  call  sequence  attribute  associated  with  a 
data  flow.  Data  flows  represent  the  passage  of  data  values  In  the  .system. 

Minll.arly.  ivtAna  Is  represented  as  an  attribute  of  data  flow  labels,  that  Is 
the  named  data  being  transferred  from  module  to  module  In  the  system 
under  ileslgn.  Typing  Is  supported  by  the  selection  of  a  To-Be-Determlned 
typemark.  I’sers  may  add  types  on  the  fly  to  the  library  packages. 

A h'<t ruction  Is  supported  by  the  abstractlonal  features  of  .Ada  (e.g..  private 
types),  as  well  as  by  the  use  of  hlgher-than- .Ada-level  program  unit  Idioms. 

(A  fa.sk  Idiom  for  Interrupt  handling  abstracts  the  Issues  associated  with 
Interrupts  at  a  level  Inexpressible  In  .Ada.)  Process  and  procedural  abstrac¬ 
tion  are  supported  graphically. 

Infoi-mailou  hiding  Is  supported  by  a  layered  representation  of  design: 
AduCiR.APFI  models  a  system  as  a  hierarchical  directed  grapli.  It  Is  also 
'Up[)ori('d  by  metlKxlologlcal  guidance. 

Soft \var<’  reiisablllty  Is  supported  in  .AdaGR.APM  through  reusable,  extensible 
program  unit  idioms  and  by  means  of  the  extensible  catalog  of  library  units. 

AdaGR.APII  sup|)orts  prototyplmt  approaches  :ind  evolutloiiarv  developiiKUit  b> 
allowing  relatively  uoti-complex  systems  to  grow  Into  larger,  tuore  elaborate 
'V'-tcms.  while  jirovldlug  code  generation  across  the  effort. 


AdaGRAPH  fiirreiuly  provides  some  liinUed  support  of  packaites.  Full 
support  for  packuites  and  generics  will  be  provided  In  later  releases. 

AdaGR-VPH  uses  macros  for  generation  of  user  definable  and  extensible 
program  unit  Idiom  templates. 

12.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  describe  It 
briefly. 

AdaGR_\PH  supports  the  P.WIELA  (trademark  of  G.VV.  Cherry. 

Thought* *T(X)ls)  method,  but  Is  not  constrained  by  It.  The  basic  paradigm 
is  system  development  by  process  abstraction,  similar  to  structured  analysis 
tcchnkiues.  but  lirought  up  to  date  with  Ada  and  the  software  engineering 
luinciples  behind  that  language's  development. 

13.  Describe  the  external  tools  with  which  your  system  Interfaces  (tool 
compatibility). 

.VdaGRAPIl  Interacts  with  a  large  number  of  commercial  word  processoi‘s/edl- 
rors.  .\daGR_Ai*H  Is  currently  coupled  with  a  programmable  editor  called 
Brief  (tratlemark  of  L'nderware.  Inc.),  and  the  .\l.sys  .-\da  Compiler  ha-  the 
IB.M-PC  series. 

M.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  object-oriented  design. 

AdaGR.VPIt  strongly  encourages  hierarchical  decomposition  by  a  layered  design 
representation.  FUwv  Is  generally  top-down,  although  wc  support  limited 
bottom-uf)  design:  use  of  library  units,  and  type  Inheritance. 

.\d:iGR.\PH  provides  a  collection  of  s.vstem  views:  a  structure-chart-llke 
module  map.  :i.s  well  as  the  data  flow  graphs  used  to  design  the  system. 

Obji'et-orlcnted  design  may  be  adopted  for  use  with  .Ad-aGRAPM.  l)Ut  more 
Mian  likely  that  would  be  after  the  overall  high-level  design  ha.s  been 
I'ompleted.  and  detailed  design  Is  starting. 

IT).  Is  your  system  supported  by  formal  syntax  &  semantics?  De.scrlbe 
briefly. 

idle  araphleal  eonstrueis  used  within  .\daGR.\PII  form  a  formal,  grttphleal 
langiia'j,e.  idle  xciuaiUles  ;)|-e  ;i  sul)s('t  of  .-\d;i.  tiiid  luiAc  not  been  form.allxed 
(Ada  lia.''Ud  t.ecn  either). 
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16.  Outline  typical  utilization  costs  Tor  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  it). 

.\daGR.\PH  X'erslon  1.1  Is  currently  priced  at  $9,875  (ITrst  unit).  $9,100 
(second-nrth),  $8,250  (sixth-tenth),  $7,100  (eleventh-twentieth).  Site  licenses 
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h:ts  not 

r'-. 

■ 

advised. 

t  he  cost 

^  'n.*' 

TASC  s 

user  to  the  Ada  Issues  Involved  In  system  design,  as  well  ;is  the  use  of 
\daGR.VPH  as  a  tool.  The  cost  for  that  Is  approximately  $950  i)er  ijerson. 

17.  Indicate  the  hostablllty  (measure  of  degree  of  portability)  of  your 
system. 


.-VdaGRAPH  Is  currently  hosteil  on  MS-DOS  (PG-DOSj.  and  as  such  will  lain 
on  a  wide  vaidety  of  machines  whlclt  stipport  that  operating  system.  Aila- 
C.RAI’H  Is  written  In  C. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/reprcsen- 
tatlons  (l.c.,  systems  engineering,  soltware  engineering,  hardware  engineering). 

Systems  engineering  with  .-VdaGR.M^H  Is  a  sensible  approach  to  system 
prototyping.  The  designer  may  determine  that  a  system  component  should 
be  developed  In  hardware,  and  can  begin  that  development  with  an  Ada 
specincatlon  of  the  component's  capabilities. 

AdaGI-L\PH  Is  Itased  upon  the  modern  software  engineering  principles  which 
uKXlvate  Ada:  Information  hhllng.  ^tnmg  typing,  library  tmlLs.  etc. 


W-: 


19.  I  low  complete  Is  the  rnetltodology  -  do  Its  principles  etnbody 

-A  development  mettiodology  only 
-A  design  methodology  oi.ly 
-A  programming  methodology  otily 
-A  project  control  methodology 
-A  management  methodology 
-All  of  the  above 

A'hUiRAlMI  i"  a  dcslan  and  devclopuicul  •'.vsnun  for  process-( n’lcni cd  >\"l('m 
d'\  |•lopll|(■IU  .  |l  allows  ^Ollic  flexibility  in  method.  It  elllbodie'-  a  ‘'i  riel 
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notion  of  project  control,  but  currently  hits  limited  management  method 
constraints. 

20.  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/users). 

It  Is  possible  to  use  AdaGFL\PH  on  a  network  of  workstations  (with  a 
modern  disk  server  and  supporting  transparent  nie  access)  and  thereby 
support  team  development.  On  a  single  workstation,  only  a  single  user  at  a 
time  may  be  at  work,  and  on  a  non-networked  workstation  many  users  may 
he  supported  serially.  Top  level  project  designs  may  be  copied  to  multiple 
workstations  permitting  team  members  to  work  on  different  system  compo¬ 
nents. 

21.  Describe  how  your  system  supports  design  trade-offs. 

Trade-offs  of  software  versus  hardware  components  are  supported  as  described 
In  18.  above.  Other  design  trade-offs  would  have  to  be  managed  by  the 
user. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

AdaGR.\PH  Is  suitable  for  .Ada  .systems  design  and  development  In  general: 
from  embedded  systems  to  bu.slness  applications. 

23.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  nu'jor 
users  of  your  system. 

a.  Mr.  Dan  Wilkinson 
.McDonnell  Douglas  .Aerospace 
Information  services  Company 
otlOl  Bolsa  .Xvenup 
Huntington  Beach.  C.A  92(H7 
(7H)  s<JU-.-).i78 

b.  .Mr.  Rich  (  onnall.N’ 

Mall  stop  .phJ 

Wt'stlnghoiise  Defense  Hlectronlcs  Center 
R.  O.  Box  710 
Bahlnua'e.  Ml)  'JidOh 


up 


Mr.  Don  King 
X  ITP^O  Corporation 
D1(3(J0  CJeorgla  Avenue 
Silver  Spring.  MD  20901 
(301)  231-2159 

-Mr.  Terry  Nicholson 

Dept.  E-llo,  Bldg.  598.  Gate  .599 

McDonnell  Douglas  .Astronautics  Company 

Highway  9d  North  and  Harpoon  Drive 

St.  Louis.  MO  6.3301 

(31-1)  92.5-66.50 

Ms.  Elizabeth  Blinker 
Code  522.1 

N.\SA/Goddard  Space  Flight  Center 
Building  23/E-129 
Greenbelt.  .MD  20771 
(301)  286-3129 


Syscon  Corporation 
3990  Sherman  Street 
San  Diego.  C.\  92110 
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1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 


Tlie  SKETCHER  tool  formally  applies  to  high  level  software  design  activities. 
In  this  capacity.  SIvETCHER  assists  with  the  development  of  the  Top-Level 
softwai-e  architecture  and  subsequent  design  relTnements.  SKETCHER 
supports  the  early  detection  of  Top-Level  design  anomalies  by  I)  the  enforce¬ 
ment  of  the  .Vda  language  semantics  and  syntax  during  the  Object  Oriented 
nesign  Diagram  generation  process,  and  2)  by  the  generation  (tf  c(Mnpilal)Ie 
PDL  files  that  accurately  reflect  the  respective  design  diagrams. 


'I'he  PEP  tool  formally  applies  to  the  Top-Level  and  Detailed-Level  design 
activities.  The  output  of  the  PEP  tool  Is  an  enhancetl  PDL  pi’ototype  Hies 
'hat  is  1)  compilable  for  the  verification  of  the  corresponding  PDL  representa¬ 
tion.  and  2)  executable  to  support  correctness  validation  of  the  design  at 
tlicse  h'vel. 


2.  What  type  of  progress  metric  does  the  system  produce?  Is  It  quantin- 
able  measure  of  completeness? 


The  SKETCliER  and  PEP  tools  produce  bcx)lean  type  progress  metrics.  whUdi 
a.ss('ss  the  consistency  atid  correctness  of  the  current  state  of  the  design. 
Progi-ess  Is  measured  by  1)  the  compilation  of  SKETCHER  produced  PDL 
(wirli  no  detected  errors),  and  2)  the  compilation  and  execution  of  TMIiP 
produced  enhanced  PDL  prototype(s).  In  utilizing  the  results  of  a  prototypes 
execution,  progress  may  be  further  measured  (or  (luantlHed)  ba.setl  the  number 
of  ilcsign  |■e(lulrcmems  satisfied. 


:i.  Describe  how  your  system  supports  documentation,  program  management 
and  control. 


The  sK'ITl'f  f  lid?  tool  directly  supixjrls  design  documemmioii  aiaivUles  in  I  hat 
I  lie  graphic  Object,  Oriented  Design  Diagrams  and  the  corn'spondlng  PDL 
rcpM-e'-ciit at  i( ms  ai't’  consistent  as  ileslgn  ilerallon  and  |•e^nemem  activities 


Both  ux^ls  Indirectly  support  program  management  and  control  In  that  they 
operate  on  Ada  compilation  unit  boundaries.  Given  that  DoD-STD-2167 
CSCI.  TLCSC.  CSC.  and  LLCSC  terminology  and  deHnltlons  map  to  .\da 
compilation  units,  then  the  design  generation,  verincatlon.  validation,  validation 
and  documentation  output  products  of  the  SICETCHER  and  PF.P  tools 
support  program  management  and  control  activities. 

-1.  Describe  how  your  system  supports  real  time  design. 

The  SlNhETCMER  and  PEP  tools  are  generally  applicable  to  any  Ada  sol'twarc 
development  project.  They  are  not  limited  to.  nor  excluded  lYom.  use  on 
The  development  of  speclllc  software  applications.  The  rcfiuiremcnts  that 
di'ove  the  SlvETCHER  toe^ls  development  (l.e..  graiihlc  coin’cniions  and  PDL 
generation  reeptirements)  were  formalized  on  a  research  and  development 
prefect  involving  the  use  of  the  Ada  language  in  the  develoimicni  of  commu¬ 
nication  system  software.  This  development  r(X)k  Into  account  tht'  cmploN- 
tnent  of  a  layei'cd  architecture,  the  implementation  of  si andardized  protocols. 
prU^i’ltlzed  concurrent  proces.slng.  common  dynamic  buffer  managemem  and 
timing  services. 

thu  h  sKETCHER  and  PEP  provide  the  means  Kj  express  the  rctiuirtaneuts 
and  mechanizations  (e.g..  size  and  time  constraints,  parallel  iiroccssinn;) 
tissoclated  with  real  time  software.  PEP  In  itartlcular.  Is  designed  to  address 
the  risks  associated  with  real  time  software  development.  1)\'  pt-rmlttlng  r:i|)i(l 
prototyping  of  critical  algorithms,  implementation  strategies,  and  Interfaces. 

T).  Describe  how  your  system  supports  concurrency,  parallelism. 

'rite  sKETC'llEFt  and  PEP  t<X)!s  support  the  syntax  and  semantics  of  tasks, 
as  specined  by  the  .\da  language.  a.s  follows; 

The  SKETCHER  tc^'i  provides  Interactive  comtnatids  for  the  dechiratioti  of 
tasks  and  the  iticlusioti  of  t.ask  bo<ly  strucl.ure  skeleton  st nt (unetits  withiti  the 
setierateii  PDL.  It  does  tiot  supiiort  ta.sk  i\pes  or  objects,  although  this 
eapahiliiy  Is  a  plaiitied  t(K)l  (mhancemcnl  sciH'dnIed  for  hA'  IhsT. 

'The  Pl'lP  t(s)l  supports  the  full  range  of  |iarallelism  sn],|)()rted  by  the  Ada 
language,  •■xiended  to  pi-ox’ide  for  execution  iracitig  of  task  activation. 

I  sriuiiiat  ion.  atid  rtmde/vous  events.  It  also  proxhles  foi-  the  time  stamping 
'  f  rende/,\-oi|s  ev’ellt  oerll rfeuees. 


6.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 


Yes.  Both  the  SKETCHER  and  PEP  tools  are  strictly  limited  to  the 
semantics  and  syntax  of  the  Ada  language  Jis  speclHed  by  MIL-STD-1815A. 
In  the  case  of  the  PEP  tool,  the  PDL  representation  that  can  be  submitted 
to  the  ttx:)l  Is  extended  a.s  per  the  grammar  presented  with  the  response  to 
question  7  below.  b  urthermure.  both  tools  are  Implemented  In  the  Ada 
language. 


7.  Does  you  system  produce  Ada  PDL? 

The  grammar  to  be  used  by  PEP  consists  of  full  Ada  augmented  by  the  use 
of  embedded  English  comments  whlclt  are  contained  within  squart-  brackets 
("[  English  ]").  sul)set  of  this  grammar,  shown  below  in  Backus-.\aur 
form,  lllustraies  the  application  of  the  s(|u;ire  bracket  nottiiion.  'I'lie  symbol 
"  =  >"  Ims  been  used  to  highlight  the  location  where  the  scittare  brackets 
notation  ha.s  been  ittserteo  into  the  .Ada  latiguage.  (See  b'lgure  1  oti  i  he 
folltjwlng  pages)  , 

8.  Describe  how  your  system  supports  life  cycle  Intrapluise  &  Interphase 
communications. 

Figures  .A  and  B  illustrate  the  generalized  activity  flows  a.ssoclated  with  the 
use  of  the  SKETCHER  atid  PEP  pkiIs.  The  t(X)ls  were  designed  to  acctmi- 
ntodate  the  highly  Iterative  activities  a.ssoclated  with  the  soi’tware  de\'elopmeni 
process  in  general.  The  scope  f)f  the  flows  (l.e..  lnteri>l)a.sc  or  Int rai)ha.se)  arc 
user  and/or  methodology  dependent  and  are  not  limited  by  the  tools' 
characteristics  or  functionality.  The  use  of  graphics  and  PDL  have  hlsiorlcal- 
ly  proven  to  be  efllcient  and  effective  means  of  communication  between 
develo|)ment  pha.se  actlvltU‘s.  between  development  groii]')  nuunbers.  for 
internal  reviews,  for  formal  reviews  with  customers,  etc. 

0.  Is  your  .system  automated,  executable,  compilable? 

'I'es,  Both  s|\F/r(  I  lid?  nnd  Bid’  are  automated  and  execiuable  tools. 
iniplemente(l  in  the  .\da  langitage.  Both  t(X)|s  produce  coiuplhd)le  BDI.  Ille^ 
a.s  products,  and  iti  the  case  of  PlOP.  the  output  product  is  an  executable 
and  enii;ince(l  v.-i'sloii  of  the  "-tibmltteil  PDL  represei'.tation. 


SQUARE_BRACKETS  : ; - 

“[  any  english  language  structure  with  no 
embedded  quotes  or  brackets  ) " 

SUBPROGRAMS _ _ _ _ _ 

SUBPROGRAM.SPECIFICATION 

procedure  IDENTIFIER  ( FORMAL.PART]  i 
function  DESIGNATOR  [FORMAL_PART]  return  TYPE_KARK 
FORMAL_PART  = 

(  SQUARE.BRACKETS  )  i 
(  PARAMETER_SPECIFICATION 
I ; PARAMETER.SPECIFICATION)  ) 

_ STATEMENTS _ _ _ _ 

SEQUENCE_OF_STATEMENTS 

STATEMENT  {STATEMENT) 

STATEMENT  ::= 

{LABEL}  SQUARE.BRACKETS  i 
{LABEL)  SIMPLE.STATEMENT  i 
{LABEL!  COMPOUND. STATEMENT 

EXPRESSIONS.  ET.  AL. _ 

EXPRESSION  ;;= 

RELATION  {and  RELATION)  i 
RELATION  {and  then  RELATION)  i 
RELATION  {or  RELATION)  I 
RELATION  {or  else  RELATION)  i 
RELATION  {xor  RELATION) 


S<;)UARE_BRACEETS  > 

SIMPLE. EXPRESSION 

[RELATIONAL.OPERATOR  SIMPLE.EXPRESSION ] 
SIMPLE.EXPRESSION  (not)  in  RANGE  i 
SIMPLE.EXPRESSION  (not)  in  TYPE.MARK 


DECLARATION _ _ _ 

DECLARATIVE.PART 

■,  BASIC.DECLARATIVE.ITEM  I  i  LATEK.OECLARATI VE_ ITEM  i 
BASIC.DECLARATIVE.ITEM 

S<?UARE_  BRACKETS  ' 

BASIC.DECLARATION  i 
REPRESENTATION.CLAUSE  i 
USE.CLAUSE 

GENERICS  .  _  -  _  -  - - 

GENERIC  DECLARATION 

GEN--IC  f riCIFICATICN  . 

GEN-.EIC  E  r  EC  I I CAI  ION 

GENERIC .FORMAL. FART  SUEFROGRAM _ S F ECI FI CAT  I  OK 
GENERIC.FORMAL.PART  PACKAGE.SPECIFICATION 
GENERIC.FORMAL.PART  : : = 

generic  {GENERIC.PARAMETER.DECLARATION ) 
GENERIC.PARAMETER. DECLARATION  : 

(  SQUARE.BRACKETS  ) 

IDENTIPIER.LIST  :  {in  (out))  TYPE. MARK 
f  •  t PY pnfstJTnN  1 

type  IDENTIFIER  is  GENERIC.TYPE. DEFINITION  ; 
PRIVATE.TYPE.DECLARATION 

with  SUBPROGRAM.SPECIFICATION  (is  NAME]  ; 
with  SUBPROGRAM.SPECIFICATION  (is  <')  ; 


►  A  * 
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The  Ada  PDL  grammar  summary  given  above  supplements  that  of  the 
Ada  language  itself,  and  is  used  as  the  criteria  by  which  the 
correctness  of  the  syntax  of  PDL  being  processed  is  judged.  The 
following  are  examples  of  the  correct  use  of  square  brackets  in 
Ada  PDL . 

with  TEXT_IO  : 
generic 

[  generic  parameters  are  yet  to  be  defined  ] 
procedure  ADA_PDL_EXAMPLE 

(  [input  and  output  parameters  to  be  defined]  )  is 
--  This  procedure  is  example  of  the  use  of  square 
--  brackets  to  defer  detail  during  PDL  writing. 

[  type  LOCAL_TYPE  is  not  yet  completely  defined  ] 
type  NEW_INTEGER  is  range  [lower  to  upper  values]  ; 

begin 

—  start  processing 
[  initialize  the  system  ] 

TEXT_IO. PUT_LINE  ( "  hi  there  novice  user  ")  ; 

--  complete  processing 

[  shut  down  the  system  ] 
exception 

when  others  =  > 

[  handle  errors  appropriately  ] 
end  ADA_PDL_EXAMPLE  ; 


Figure  1  (cont'd) 
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Figure  B  RAPID  PROTOTYPING  FLOWS 


10.  Describe  the  graphics  support  lor  your  system. 


The  SivETCTLEF?  Is  an  Interactive  graphics  design  C(X)1  that  supports  the 

ilevelopment  software  architectures  and  suhseciuent  design  renneinents. 
SKETCHER  currentl\’  operates  wltli  a  Tektronix  -1107  series  blt-inapped  colcjr 
graphics  terminal.  The  Aria  Grai)lilc  Deslgti  .N'otatlon  utilizes  Icons  that  are 
derived  from  the  ucn'ks  <M‘  Dooch's  Object  Oriented  Design  representations 
and  Bnhr's  graphic  conveittlons. 

H.  Describe  how  your  systent  supiK>rts  concepts  of; 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-Typing 

-Evolutionary  development 

-Glcnerlcs 

-Macros 

-Data  flows 

-Control  flows 

Earl\'  proiot.\plng  ami  rapid  prototyping  are  supported  by  the  SIxETCHER 
and  PEP  tools.  sKITl'C  lIER  |>rovldcs  ati  Interactive  t(x:)l  for  the  development 
(if  pnaotype  PIFE  '(keleton  shells  which  front  ends  the  F'EP  tool.  This  forms 
an  aiit('mate(l  nmans  for  the  develoi)tnent  of  experimental  prototypes  (possibly 
during  the  re(|iiircments  dennitlon  pha.'^e)  or  more  formal  rapid  prototypes 
that  ma\'  be  generateil  m  the  design  or  coding  pha.se  of  a  ilevelopment. 

Software  reiisabilit  >■  Is  supported  by  the  SEETCI  lEl^  tatls  ability  to  ititerac- 
getter, ate  ''Ofiwai'e  archlt  ect  itr(‘  et  tm  poiten.ts  that  address  rettsabilUx'  issues 
(I'lieh  as  the  ioeal!/,ai ion  of  specific  liardware  atid/or  operating  system 
1  lit erl’aees  to  iinhine  iiaek.-tge  areas). 

Inf' Mination  hiding  is  -'Uppotaed  li\'  both  t(K)ls  b\’  their  .abllii\'  to  both  hide 
and  defer  detaiE.  I.oeal  le.g..  to  a  jiackage)  itiformatlon  can  not  be  accessed 
'•vhli'aii  ic'ii|M  (vplicitiy  evpotaed.  Pol  It  tools  siipporr  the  ilefeia'al  of  le\els  of 
d'lail.  whi'li  are  unimi'ort.attt  at  the  cnrretit  design  Uwel. 


i k.t'j;!!!'!  ri  ii'-rpt  H  ■'iii'inirted  by  i  lie  sKl-yr( 'I  Il-IR  Mini  I’ImP  tool;-;  l)\-  llic 
llni'i'iif'  f.'  ilir  Ail:i  laii'Jluntxe  tViirnn^  specincd  by  I  lie  Ada 

an'j,iia'j,''. 

Vb'-T  raaiii  n  is  -.iiiiporiiMl  i/onslsiciu  with  the  Ada  l;vn;j;ua'j;f. 

r;.liri'^  1'  'iipp<'rii‘d  c'oiislsteiii  wltli  tlie  Ada  lani;ua'^f  by  IMOP.  'I'lils  siiiiiiori 
'  '  ''a-aal- d  N'  liii'liidf  the  ability  to  (.‘xainiiw  and  set  objects  i)t‘  arldtrarlly 

■  aipii'X  dal  a  i\  p.‘s.  '^l\PT(  MPH's  siiiipoid  of  lypliiii;  Is  limited  to  the 

:  !'  aMllaai ’■  11  - ..j'  ki-y  data  iyi)es.  which  Is  often  critical  even  at  architectural 

■  ■v.  i'  ,  ,]■  Me  d'"'!'-!,!!  pr''C(‘ss. 

la.  da'  'lai','.  d'-'.  |•|,■.pme||t  Is  ■support  <■(  |  dlrecil\'  b\'  SKP'I'C '1 IPI '  li\’  tli<'  use  of 
la  ralaa  d  "'rpl)"  i>|'ea  mid  objects. 

I  !•  as'M''-  a:-'  -upih'iTimI  by  the  SKIMl't '1  Iplv  and  PPP  lools  by  the  adherenia' 
Ml.’  \da  Imivuaae  '.^fneric  feature  as  speciried  li\'  the  Ada  laiiame^e. 

M  l  '"  -  at'  li  I  "UppoMed  b\  .sI\PT( '1  ir.P  or  PPP. 

I)-:  a  ;M  iiid  a.-'soelaied  analysis  actlvliies  aia-  suppoiued  b\'  the  prot()l\-pe 

a  ai.M  a  ira'-lna  oiitlons  of  the  PPP  io<,l. 

I  all-.  ;  1";  .'AS  ||a  siipporteii  I  ly  "S  K  P'TC  1 1  p  K  throU'Jih  Mie  ability  to  indicate 
-ub;  r  uraiii  and  task  eiiti'y  caiis  on  tiie  diagram.  PPI’  supports  i  iie  process¬ 
's-  I  all  Alla  f'laus  of  flow  control. 

12.  Is  tlu'rt'  :i  partidlRm  embedded  in  your  system?  If  so,  describe  it 

briefly. 


I 


ar"  III)  paiadimns  liiiilt  dirertly  Into  I'itlier  IMsP  oi-  SKlMI't '!  IPIP 
.  I  IS  Me  1 'si'i-'s  Manuals  of  botli  lu-ovlde  usaue  ituldeHnes  wliich.  whe 
M'i'.'.'  d.  r'  siip  ill  sPa^iiiricani  i,v  improxaal  pi'oduci i\ it y  and  desiiiiis. 


IS.  1)(  ■scribt'  the  ('Xternal  t<x)ls  witli  whicli  your  system  Intc'rftices  (tcx)l 
comi)atit)ility ). 


P.  IS  'b  I  ']'<  lll'dv’  and  I’l'.l’  l•omulUllil•all■  wlili  other  sysiem  tools  Ihroiivh  tie 
S'.  I  iiaiar'l  o-M  rilca.  uhicli  i-o.iitaiii  the  Ada  PDl.  Iiciny  prodiieed  or 

'i'a  .  -c.i,  'riii-  b  im  pi'uieuii  i-d  iliroueh  ilie  ul  lll/.at  ion  of  Ada's 

ll.Xr  l<)  '■  ap  ibltii  j. Tlii'  ue-'diaiii.oii  io|i  p-'-riuits  SK  I'Ml't  I  i  PI »  and  |*P1’  t.. 
i'ai'!'!-'  \ 'a  a  a  '.vid'-  •.ai'ii.I’,  .f  .-vi-iii;-  iuidudiU'S  loop  ^iicli  as  text 


I  t.  Doscribc  how  your  systcMii  supports  lilcrarchlcal  decomposition  and  How 
direction  (topdown,  bottoins-up,  both,  etc.),  architectural  perspectives  (deslKner 
creativity)  and  object-oriented  design. 


1  lld\  >lesl'.;ncd  and  developed  to  specincally  sui)i)ort  objcct-oiiented 

foi-  Ada  sed'tware.  The  graphical  design  commands  supported  by 
^KITl'^  1  11;R  Include  both  topdown  (e.g..  creation  of  a  subi)rogram  within  an 

■  xletlmj,  obji'ct)  and  bottoinup  (e.g..  creation  of  a  package  or  sub[)rogi'am 

"ucai-^ulai inc  existlmi;  objiaus).  'Idle  designers  nexlblllty/creatlvity  Is  rurtlier 
'UplH  ■|■^.■d  by  the  ability  to  move  and  resize  objects  anywhere  on  tlie  dlagrtim 
'Ahi^di  not  result  In  illegal  Aila  syntax  or  sematitlcs.  SKE'l'C  1  IRR’s 

■  niiiiaiid  |■•■lu■lO'lre  Includes  all  the  commands  necessary  to  support  an\’ 

.ni  jh  .-.p  1,  >11  I i'chnii|iic. 

1 I'ld'  pixi.-rsscs  Ada  RDR  without  any  constraint  bast'd  on  past 
p'-;  li.e..  compilations),  it  stipports  any  design  varhition  |)ossilile.  Its 

lexiPiiii y  ami  adaptability  permit  the  rapid  prototyping  of  alternate  design 
■■  niapts,  thereby  encouraging  the  designer's  creativity  iti  ileveloping  the  Unal 
1' 'iyn  •->'iuili-n.  l'R,l’'s  support  for  various  types  of  hiertirchal  dectamposlUon 
R  '•"eniiaH\  e(|ul\aleut  to  that  of  any  conforming  Aila  Program  1/ibrary  (i.e.. 
■p.  rs  ai'>  no  rest rict loiis  except  on  compilation  order). 

l.d.  Is  your  .system  supported  by  formal  syntax  &  .semantics?  Describe 
briefly. 

'i'^ IMd'  and  sKP/rc .'I-IER  support  the  generation  and  processing  of  a 
:o:niall\-  denned  A>la  PDI.  which  Is  <lenned  in  Baetts-.Naur  form  (see  the 
o-p-n-e  lo  >|uesiion  ^7  for  a  summary  of  the  grammar)  and  hits  been 
'.'■riiled  using  \aiious  aiitilysls  t<K>ls.  d'he  Object-Oriented  Design  Diagram 
■r  an.  eiii  ioim  (which  were  adapted  from  the  works  of  Buhr  aiiil  Booch)  are  of 
neie->iiy  rofinal.  to  permit  the  on-the-fly  .semantics  checking  which  Is 
perl' >rnie' I  li\'  sKIlTt  MRR.  The  form.al  dennitlon  Is  given  in  the  SKITld  'H- 
PR  I  s,..rv  \hanual. 


If).  Outline  ty()ical  utili/atloti  costs  for  your  system  (eost  of  ac(|uiring,  u.slng, 
traitiiiig,  maintaining  it). 


d\ I  ,T<  I  li  d and  Pl'd’  are  bo,i  h  curreml\’  proprietary  tools  of  .s't  st 'ON.  and 
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,-i  I'oi'  I  lie  'oftware  iv  eiirrenil\’  ik'I  a\ailable.  d'he  follouing 
■puii'  iiieni -  are  nominal  based  on  Sd'st 'ON's  inteiaial  experience. 
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SI<ETCHER 
Required  Hardware; 

Required  Software; 
Required  Training; 


Graphics  Terminal  (e.g.,  TEK  -4207) 
Graphics  Printer  (e.g.,  TEK  -1696) 

None 

Approximately  -I  hour  class 
(proHclency  takes  approx  1  week  of  use) 


Required  Hardware; 
Required  Software; 

Required  Training; 


None 

Compatible  Ada  Compiler  and  Command  Language 
Interpreter 

Basic  L'sage  -  2  hour  class 
Advanced  Usage  -  .3  day  class 


Required  Expendables; 
Notes; 


An  ANSI  style  terminal  will  Improve  display 
efllclency  during  prototype  execution. 


17.  Indicate  the  hostablllty  (measure  of  degree  of  portability)  of  your 
system. 

Both  SKETCHER  and  PEP  are  written  In  Ada  to  obtain  the  maximum 
amount  of  hostablllty  possible.  SKETCHER  contains  no  system  (host) 
dependencies  and  should  be  nearly  lOO*^  rehostable  as  Is  (this  has  been  our 
experience  to  date).  PEP  utilizes  the  host  Ada  compiler  and  Is  partially 
written  In  the  host's  command  language.  The  Inler-program  communication 
mechanism  and  commanfl  language  facilities  used  by  PEP  are  all  very 
simple,  to  minimize  the  effort  require  to  rehost  the  tool.  The  balance  of  the 
PEP  softw'are  Is  written  In  Ada.  and  should  be  100%  rehostable. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/rcpresen- 
tatlons  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

s^'SCON■s  t(»is  use  the  Inherent  capabilities  of  the  .\tla  language  to  provide 
for  Interdisciplinary  representations.  At  the  top-level  of  system  design  or 
engineering,  SYSCON  typically  uses  "virtual  packages"  to  encapsulate  func¬ 
tional  reciulrements.  wUlioiit  necessitating  a  commitment  to  a  particular 
Implementation  method  (e.g..  hardware  or  software).  The  utilization  of  Ada's 
Interface  dennitlon  mechanisms  provides  a  method  for  capturing  the  details  of 
the  ciii'rent  level  of  abstraction  while  deb'rrlng  decisions  about  lower  ku-els. 
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19.  How  complete  Is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  methodology 
-A  management  methodology 
-All  or  the  above 

A  high  level  overview  of  the  software  methodology  utilized  by  SYSCON  Is 
presented  In  Figure  C  (on  the  following  page).  This  methodology  Is  strongly 
oriented  toward  the  cited  development  methodology  category.  The  SKETCH- 
ER  and  PEP  tools,  together  with  a  validated  Ada  compiler,  are  the  primary 
development  tools  components  of  an  .-VPSE  currently  utilized  by  SYSCON  for 
the  development  of  Ada  software. 

Other  tools  that  are  also  part  of  the  .\PSE  are  presented  In  the  table  on 
Figure  C.  These  facilities  are  Included  for  completeness  In  the  presentation 
of  the  methodology.  SpeclHc  details  of  the  APSE  tool  facilities,  with  the 
exception  of  the  SKETCHER  and  PEP  t(X')ls,  are  beyond  the  scope  of 
ciuestlonnalre. 

20.  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/ users). 

Both  SivETCHER  and  PEP  are  mulil-user  systems  which  can  be  used  by  as 
many  designers  as  the  host  hardware  Is  able  to  computationally  support. 
Integration  of  several  teams/lndlvldual  efforts  Is  accomplished  at  the  program 
llt)rary  level  (e.g..  through  compilation  of  the  Ada  PDL).  The  absence  of  a 
built-in  conflguratUm  management  scheme  permits  SivETCHER  and  PEP  to 
be  ported  to  a  wide  variety  of  APsE's  with  minimal  Impact  on  existing  CM 
systi'ins. 

21.  Describe  how  your  system  supports  design  tradc-olTs. 

One  of  the  prime  motivations  of  both  SlxlOTCl  llOR  gives  a  designer  the 
'■apablllty  tc;  ileve|o|i  and  evaluate  many  different  design  architectures  prior  in 
'•ominUtlng  to  the  one  whhdi  best  ad<lresses  all  recpilrements.  PEP's  ability 
to  generate  ra[ild  prototypes  give  the  designer  an  opportunity  to  peud'orm 
detailed  evaluation  of  algorithms,  data  st |•u(■^ures.  and  approatdies  prltu’  to 
full-'eale  '  |e\  idoI)nieut  . 
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DOD-STD  2167 

Development 

Parallel / Support 

Applicable 

Level 

Phase 

_ Aotlvltv _ 

_ _ 

Pre-Software 

Concept 

Ada  Development  (1,2, 3, 4) 

Development 

Formulation 

Envlrozunent 

1(6.6) 

Indootrlnatlon 

1 

1(7. 8. 9) 

1 

Software 

Requirements 

V 

Standards/Metrics 

1(7) 

Requirements 

Formulation 

1 

1 

Analysis 

V 

1 

Software 

Rapid  Prototyping 

1 

Arohlteoture 

1  i 

1(5.6.11) 

[Graphs. Compilable  i  i 

1 

PDL.  Executable 

1  1 

1 

Prototypes! 

1  1 

V  1 

1 

1 

Preliminary 

Top  Level 

Formal  Design  i 

1(5.6) 

Design 

Design  [Graphs, 

1  1  1 

1(8.9. 

Compilable  PDL, 

1  1  1 

1  10,11) 

Executable 

1  1  1 

1 

Prototypes] 

1  V  1 

1 

1  Informal  i 

1 

Detailed 

Detailed  Level 

I  Test  9  1 

1 (5.6) 

Design 

Design  [Graphs, 

1  Integrate i 

1(8,9. 

Compilable  PDL, 

1  1  1 

1  10,11) 

Executable 

I  1  1 

1 

Prototypes] 

1  1  t 

V  \  1 

1 

1 

Coding  fif 

Code  »  Debug 

Develop  Code i  i 

1(6) 

Unit  Test 

[Coding  9 

1  1  1 

1(8.9. 

Transformation 

1  1  1 

1  10,11) 

Guidelines] 

1  1  1 

1 

V  V  V 

1 

CSC  Integration 

Test  9  Integration  Formal  Testing 

1(6) 

Test 

1 

1 

1 (8.9) 

1 

CSCI  Integration 

1 

1 

Test 

V 

1 

Evaluation 

Software  Metrics 

1(8.10, 

1 

1  11) 

Maintenance 

_ V _ 

V 

Figure  C 

ADA  BASED  DESIGN  METHODOLOGY  OVERVIEW 

MAPSE 

DEVELOPMENT 

SUPPORT 

_ TOOLS _ 

TOOLS _ 

(1)  Ada  Compiler  (5)  SKBTCHBR  (7) 

(2)  Source  Line  Editor  (6)  PEP  (8) 

(3)  Library  Management  (9) 

(4)  Debugger  (10) 

(11) 


Drafter 

Ada  Statement  Analyzer 
Pretty  Printer 
Abstractor 

Ada  Arohlteoture  Analyzer 
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22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

PEP  and  SIvETCMER  are  generic  software  development  support  tools 
applicable  to  development  of  systems  of  all  kinds.  In  certain  circumstances, 
ro!"  example  the  development  of  a  trusted  system  using  a  speclHcatlon 
language,  standard  procedures  may  have  to  be  altered  somewhat.  .\ny 
s\stem  which  can  be  developed  using  Ada  PDL  as  |>art  of  the  design  [)rocess. 
<-an  successfully  utilize  SIvETCHER  and  PEP. 

22.  List  the  names,  addresses,  and  phone  numbers  of  live  (customers)  major 
users  of  your  system. 

Poth  PEP  and  SIvETC'MER  are  proiudetary  t(K.)ls  of  s'l'sCON  ( 'orporation. 

In  that  I'ole.  they  are  used  to  support  s^■sc■ON■s  ongoing  Ada  activities,  and 
art"  thoroughly  Integrated  into  the  s^■sC■ON  .Ada  Softwai-e  l)evclo|'>nK‘nt 
Met  hodology. 
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NOTE:  The  system  that  Is  described  In  the  following  answers  Is  the  AGDS. 

S(mie  parts  of  the  system  have  been  prototyped  rising  1FL\D  funds  as  a 
"pr(x>f-of-coiu‘epf’.  but  there  Is  not  yet  funding  for  a  complete  system,  and 
no  I'huis  t(r  produce  a  commercial  product. 

NOTE;  saDT  Is  the  name  of  the  original  method  devised  by  .SofTech.  and 
IDETO  Is  th<-  public  domain  name.  The  terms  are  used  interchangeably  In 
I  his  discus.sion. 

1.  Ocscribe  how  your  system  .supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

There  :u'e  two  Ibrms  of  consistency  checking.  First,  the  IDEFO  drawing 
package  pre\(uits  the  user  from  drawing  Illegal  IDEFO  diagrams  (such  as 
ar'-ows  or  boxes  in  the  wrong  place).  .Second,  we  have  developed  the  set  of 
rules  for  cheeking  glolnil  consistency  (duplicate  arrow  oi-  box  names,  dlagi'ams 
’.vith  external  inputs  that  don't  match  the  parent,  etc.). 

2.  What  type  of  progress  metric  d<x;s  the  system  produce?  Is  It  quantifi¬ 
able  measure  of  completeness? 

No  response  wa.s  provided  for  this  question. 

IE  Describe  how  your  .system  supports  documentation,  program  management 

and  control. 

HDlT't)  is  dcsiglual  to  Include  a  documentation  system.  As  such,  the 
c(iiniileied  AGDS  wentid  Include  the  IDEFO  documentat loti.  I''urlher.  it  Is 
planned  that  the  systetn  would  allow  .Ada  coile.  including  eomtneiits.  to  be 
hidden  behind  the  IDEr''0  Information. 

1.  Describe  how  your  system  supports  real  time  design. 

N,  1  re'-pon-'e  wa.'^  pr()\-id('d  for  this  (|uestlon. 

h.  Describe  how  your  system  supports  concurrency,  partillellsm. 

IDEFO  diagrams  norm:ill.\’  contain  no  inform, atlon  about  t  lie  timing  of  events. 

'  iliiii  rniiciions  can  ha|)i>en  coiiseeiitU’e  or  coiKuirrent  ly .  We  li:i\  e  I'xteiideil 
the  IDEI’t)  drigiciins  to  imdiide  liming  information,  mi  th:it  the  user  ran 
■■pi  '-ir\'  i-i  .iieiirreiicy. 
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(5.  Is  your  system  eoiistralued  to  a  particular  Implementation  language  (Ada)? 


Mucli  of  the  system  (IDEFO  construction,  consistency  checking,  simulation, 
etc.)  Is  language  Independent.  However,  the  method  used  for  the  Hnal 
translation  to  PDL  Is  currently  based  on  Ada. 

7.  Docs  you  system  produce  Ada  PDL? 

\'es.  It  produces  a  compilable  super-structure  of  an  Ada  program. 

8.  Describe  how  your  system  supports  life  cycle  Intraphase  &  Interphase 
communications. 

The  entire  design  [n’oeess  Is  done  by  using  behavioral  IDEFO.  These 
diagrains  can  he  xcrlfied.  simulated,  reviewed  by  others,  and  checked  for 
I'eusahllU.v. 

Once  ilie  design  eniei's  I  he  programming  pha.se.  high  level  Acla  code  Is 
aiitomaiically  generated,  whlcli  can  be  filled  in  to  produce  running  programs. 
These  progi'ains  can  again  be  simulated. 

\s  the  system  enters  the  maintenance  pha.se.  running  programs  can  lie 
returned  to  the  IDEFO  semantic  database  for  purposes  of  documentation  and 
reiisahllily. 

h.  Is  your  system  automated,  executable,  compilable? 

The  system  Is  platmed  as  an  automated  system,  producing  compllal.de  Ada 

C(  )(  ll-. 

10.  Describe  the  graphics  supiwrt  for  your  system. 

Design  :ind  fe\ie\v  :i|-e  haiidltsl  hy  a.  graphics  front-etid.  Rnntiitig  on  ati  IHM 
l’(  .  simulation  also  niUizes  grtiphics. 

11.  Describe  how  yonr  system  supports  concepts  of: 

-Etirly  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-I’acktiglng  concept 

-Abstrtietlon 

-'I'yplug 
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-li^volmioiiary  dovclopiuoiit, 

-Generics 

-evolutionary  development 

-Generics 

-Macros 

-Data  flows 

-Control  nows 

Software  reusahilit\-  Is  planned  to  he  handled  by  access  routines  to  a  IDCFO 
database.  The  user  has  the  ability  to  browse,  request  speclHc  routines,  llnd 
r''usablllry  Inforination.  and  look  for  common  functions. 

1  nforinat ion  hidine;  is  d(nie  by  usin^  the  hierarchical  structure  of  IDRFO  to 
hhF  lower  levels  of  i  he  ilesp^n.  Further,  the  system  will  be  able  to  hide 
Ada  cod*'  wltliin  the  s.-\D'I'  dlai;rams. 

Fackaiiltpj;  is  used  in  the  ■generation  of  tlie  .Vda  co<le.  Each  box  within  an 
IDleFO  dki!.;ram  becomes  an  Ad;t  package. 

T\'pin'j;  is  us('r  controllable. 

(ieneries  arc  iinplicit  in  the  conversion  method. 

Data  and  control  flows  nee  both  supiiorted  by  IDEFO. 

12.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  describe  It 
brlelly. 

The  most  efnciciit  way  to  build  systems  Is  to  design  In  behavioral  IDE1''0. 
ignoritig  pi-ogramming  considerations,  d'his  design  requires  graphics,  worksta¬ 
tions.  siuiulailon.  \erinc;u ion.  r('vlew.  and  reusability. 

The  '-(•(■ond  part  of  ^y-icni  dcsi'gn  is  Iterating  between  code  :ind  design. 

Id.  D(;scribe  Lite  extttrnal  Uxtls  with  which  your  system  interfaces  (tcx)l 
comi);LtU)iliLy). 

Tlwfc  arc  'OiO'crtcrs  lor  moving  from  the  IDFI'T)  .semantic  database  to  other 


( 
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I  t.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  object-oriented  design. 

IDliFO  Is  designed  as  a  hierarchical  method.  As  such,  there  are  people  usliu 
our  t(^ol  from  the  top-down,  or  bottom-uiJ. 

15.  Is  your  system  supported  by  formal  syntax  &  semantics?  Describe 
briefly. 

See  papers  on  SADT  and  IDEFO. 

10.  Outline  typical  utilization  costs  for  your  system  (ccxtt  of  acquiring,  using, 
training  &  maintaining  It). 

No  respcnise  was  provided  for  this  question. 

17.  Indicate  the  hostablllty  (metisure  of  degree  of  portability)  of  your 
system. 

( 'uri'eitt ly.  It  retiulres  an  .\l.S/DOS  machine,  d'he  design  for  the  nnal  system 
:-eqiiii'es  any  workstation  and  main-frame  comhhiation. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractions/represen¬ 
tations  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

IDh’Ftj  has  been  used  In  software,  hardware,  factory  automation,  personnel 
proi-fM lui-es.  and  hundrt-d.s  of  others. 

15).  I  low  complete  is  the  mettuxlology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  methodology 
-A  management  methodology 
-All  of  the  above 


20.  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/users). 

L'sers  work  at  workstations.  Diagrams  on  placed  In  a  database  on  a 
nialnfranie.  to  be  reviewed  by  others  at  their  workstations. 

It  Is  plattned  that  the  cotnplete<t  diagrams  and  code  o!‘  dllTerent  organizations 
can  be  checked  for  consistency,  and  simulated  or  combined  on  the  maln- 
frntne. 

21.  Describe  how  your  system  supports  design  trade-olTs. 

N('  response  was  m'ovided  for  this  question. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

.\'o  respiaisc  u a.s  provMed  for  this  (|uest1on. 

22.  hist  the  names,  addresses,  and  phone  numbers  of  Tive  (custonu'rs)  imdor 
users  of  your  system. 

N<  <  i-espoiise  u  a.s  provided  for  this  (|uestion. 
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Associative  Design  Technology,  Inc. 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 


The  central  module  of  the  PadTech  Design  Core  Is  an  Inl’erence  engine  called 
the  "process  machine."  The  process  machine  applies  system-  and  user-defined 
rules  of  logic  (Inferences  and  constraints)  to  construct  a  knowledge  base  that 
contains  the  process  design.  The  process  machine  Is  thereby  able  to  detect 
Inconsistencies  Immediately.  It  will  not  allow  the  user  to  enter  logically 
Inconsistent  facts  In  the  knowledge  b;tse. 
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By  definition,  the  knowledge  lt;tse.  built  and  maintained  by  the  process 
machine  Is  assumed  to  be  a  closed  world.  This  means  that  the  knowledge 
ba.se  Is  the  unh'erse.  A  fact  can  only  be  true  If  the  supporting  data  Is 
Included  In  the  knowledge  base.  The  process  machine  detects  Immediately 
any  logical  itssertlon  or  tiuery  that  would  violate  this  closure  principle  and 
Informs  the  user  or  expands  the  knowledge  bttse  as  appropriate. 

The  process  machine  lia.s  bullt-ln  error  handling  that  can  Inform  the  user  of 
any  errors  resulting  fixun  attempted  logical  operations.  'I'he  error  Is  reported 
tltrough  eltliei-  the  textual  or  graphics  Interface  to  the  itrocess  maclilne. 

2.  What  type  of  progress  metric  docs  the  system  produce?  Is  It  quantin- 
able  measure  of  completeness? 

'I'he  Padd’cch  Design  (.'ore  lias  not  automated  the  pixxluctlon  of  quaiiilfiable 
metrics. 

3.  Describe  how  your  system  supports  documentation,  program  management 
and  control. 

'flu'  Pad'l'eeh  Design  (  oi'c  does  not  |)rovlde  pre-packaged  automated  pi-ojeci 
management  loots  for  documentation,  program  management  or  acec'ss  ronirol. 
d’liese  I'cmures.  liowe\ei',  can  be  treated  as  universal  attributes  of  ohjecis  hi 
Die  systein  design.  lienee,  like  an.v  other  ob.lect  attribute,  t  he,\’  cmi  he 
provided  f' .r  and  e\  eii  made  matidator.v  when  using  I’adTech  to  design  a 
'\-teiii.  Therefore,  Dic'-e  features  are  completel.\'  ciistomlxahle  for  eaidi 

projecl  . 


1.  Describe  how  your  system  supports  real  time  design. 

The  PadTech  Design  Core  Is  Intended  to  meet  the  needs  of  real  time  design. 
Time  In  the  PadTech  Design  Core  Is  treated  as  a  sequence  of  events.  The 
operation  of  PadTech  processcu’s  can  be  synchronized  with  a  real  time 
'e(!uence  (tf  events  to  any  granularity  required  by  the  system  designer. 

5.  Describe  how  your  system  supports  concurrency,  parallelism. 

The  F^adTech  Design  Core  supports  the  creation  of  designs  with  massive 
liarallellsm.  and  allows  the  designer  to  incorporate  as  much  concurrency  as 
allowed  by  the  problem.  It  supports  the  notion  of  "processors."  Processors 
are.  In  essence,  executable  objects  triggered  by  changes  In  the  state  of  the 
knowledge  base.  The  result  of  executing  a  processor  Is  called  an  event.  .\n 
p\ent  actually  marks  a  state  transition  and.  in  general,  signifies  the  cre- 
ation/termlnation  of  an  object  or  a  set  of  objects  and  the  relations  connect¬ 
ing  them.  "process  illagram"  Is  used  to  capture  the  "trigger  rules"  and 
■■  processor-[)ro<luces-event"  reialionshii.is  that  together  describe  a  complete 
process.  The  trigger  rules,  which  determine  under  u'hat  conditions  a 
proces.^-'or  will  "fire."  can  be  tiuite  complex  and  Introduce  concurrency. 

.knytline  the  trigger  rule  conditions  are  met  (l.e.:  anytime  that  the  state  of 
the  universe  of  discourse  is  as  described  in  the  trigger  rules)  then  a  processor 
will  fire.  If  the  trigger  rule  calls  for  a  processor  to  be  Hred  for  every 
Instance  of  a  particular  oltject  (or  set  of  objects  and  their  relationships)  then 
the  [)rocessors  are  made  to  execute  concurrently.  .\t  that  point,  each 
processor  is  a ittonoinous.  ( ■ommunlcation  takes  place  strictly  throitgh  the 
knowledge  base,  'riiei'c  is  theoretically  no  limit  on  the  nttmber  of  concur¬ 
rently  fired  proct'ssors. 

(■).  I.s  your  .system  constrained  to  a  particular  Implementation  language  (Ada)? 

The  Padd'i’ch  Design  (  ore  is  not  const  raine<l  to  create  designs  for  :i  partlcu- 
i:ir  language.  in  met.  a  Pad'fecli  design  may  be  itsed  to  intt'grate  modules 
implemented  in  dls'erse  laiigitages. 

7.  Do<;s  you  sysUtrn  produce  Ada  I’DL? 


The  p:ii|Teeli  Design  (  ore  will  ha\’('  rull  Ada  PDL  i>i’oditcrloti  capablllt.x'  in 
le  xisii ,ii  ■_>.()().  prototype  \da  PDP  proditctlon  capablllt.x'  xxlll  be  diunoii- 

-i!"iiei|  wiili  Pe’.isi(,n  1.00.  Dc'-igns  produced  liy  Pad'fech  arc  part Icularl.x 
ae|p-i|ped  to  -uppori  .\da  'ofiw.-ire  engineering  princiihes. 
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8.  Describe  how  your  system  supports  life  cycle  lutrapliase  &,  Interphase 
communications. 

One  of  the  goals  of  the  PadTech  Design  Core  Is  to  elevate  and  automate  the 

role  of  a  process  architect  and  to  totally  Integrate  the  design  work  of  the 

architect  with  the  Implementation  of  the  engineer.  The  result  Is  that  the 
traditional  boundaries  between  design  and  Implementation  phases  of  the 
scM'tware  life-cycle  are  not  distinct.  Indeed,  the  dichotomy  between  design 
and  Implementation  Is  largely  removed.  PadTech  is  built  upon  the  notion  of 
■■  archtyping."  The  early  results  of  the  de.slgn  effort  are,  In  fact,  more  than 
a  prototype:  It  Is  actually  the  basis  for  building  the  application. 

At  the  same  time,  the  designer  is  able  to  quickly  modify  the  model  whenever 

new  information  requires  a  change  to  his/her  plans.  The  result  Is  an 

unusual  rapid  prototyping  approach  and  not  a  strict  waterfall  software 
developntent  life  cycle  model. 

h.  Is  your  system  automated,  executable,  compilable? 

Wtrhms  aspects  of  the  PmITech  Design  Core  are  fully  automated.  For 
■  'vamide.  the  graphics  design  tcx.)!  automatically  generates  P.ADL  (Process 
Architecture  Design  Language)  which  Is  then  sent  to  the  process  machine  to 
query/modify  the  knowledge  l)a.se.  This  same  approach  Is  used  to  Implement 
tK'il;  processors  that  communicate  with  and  are  Integrated  by  the  process 
machine.  .ADT  provides  libraries  for  generating  P.ADL  In  order  to  automate 
this  :i|)proach.  "Processors"  In  the  .\DT  vernacular  are  executable  objects. 
ADT  does  not  offer  PaDI.  compilation  capabilities  at  this  time. 

In  terms  of  translation  from  the  .-ADT  design  language  (P.ADL)  to  Aria,  the 
producrlon  of  .-\da  (or  Ada  PDL)  Is  automated.  ADT  does  not  provide  an 
Alla,  language  proccs.sor. 

10.  Describe  the  graphics  support  for  your  system. 

The  Padd'cfh  Design  Core  offers  I  wo  fully  functional  user  Interfaces,  one 
ti.'Xiual-  and  one  graidiics-based.  The  graplilcs-based  iiK^dule  Is  called 
I ’adsiirface.  PadSurfacc  Is  (•iirrf'utly  implemented  on  a  Silicon  Cirai)hics  roloi-. 
Iiigh-rc^olutlon  woi-Rstallon.  The  user  interacts  with  the  s\'siem  through  a 
moii'-e  and  the  keyboard,  d'he  grai.diles  Interface  allows  the  user  to  ci'eaie 
both  I.vpe^  and  Instances.  It  supi)orts  three  system-sui)i)lled  diagram  types 

tacihiiy  diagrams  for  planning,  concept  diagrams  foi-  data  design,  and 
[a'orc^-or  diagram^  for  flow  control)  as  well  a.s  useu’-dellnf'd  dlagi’am  t\'pes. 
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11.  Describe  how  your  system  supports  concepts  of: 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-'Fyplng 

-Evolutionary  development 

-Generics 

-Macros 

-Data  flows 

-Control  flows 

Beciuise  nuiny  of  the  concepts  are  related,  and  some  do  not  have  generally- 
accepted  deHnitlons.  we  have  discussed  the  concepts  as  a  group  In  the 
context  of  the  PadTech  methodology.  The  PatlTech  Design  Core  takes  a 
unl(|iie  approach  to  the  software  design  process.  This  approach  makes  use  of 
many  concepts  commonly  found  In  object-oriented  and  logic  programming 
f'livii-onments.  In  particular,  the  notions  of  types.  Instances  of.  software 
reusaliUlty.  and  abstraction  are  handled  In  a  very  sophisticated  and  complete 
manner.  .-\  few  deHnitlons  of  the  PadTech  concepts  are  Includerl  In  this 
(luestlonnalre. 

I'lie  Padl'cch  Design  core  consists  of  a  knowledge  base,  the  process  machine 
and  \'arl(jus  Interface  systems  Including  a  P.VDL  editor-interpreter  and 
PadSiirfnce  (a  graphics  Interface).  The  knowledge  base  Is  divided  Into  the 
infoi'inatlon  base  and  the  rule  base.  The  rule  base  contains  constraint  rules, 
inference  rules  and  consistency  rules.  The  proce.ss  machine  Is  responsible  for 
ci-eating  and  maintaining  the  knowledge  ba.se.  The  process  machine  receives 
messu'ics  fi-om  !U’oces.sors  (reusable  executable  software  modules).  The 
messages  may  be  cpierles.  realm  modlHcatlons  or  triggering  retiuests. 

A  realm  pro\'ides  granularity  in  the  knowledge  b;i.se.  It  Is  a  portion  of  the 
u<'i-|d  n-om  a  i)arilculai-  point  of  view.  A  realm  consists  of  a  state  of. 

■ilTalrs:  i.e..  objects  that  bear  relatk^ns  to  one  another.  Souu'  of  these  objects 
ire  exeeiit  a bl("  uiid  ai'c  called  |)roce.ssors  or  operators. 

l'.\ ery  I  111  lig  oecii[jying  a  nudm  Is  an  ol)J<'ct.  A  ty|)e  Is  an  object  that 
pi-e^lde-,  ovei'  Us  Instances.  A  ty|ie  Is  a  prototyi)e  or  template  that  speciries 
a  pattern  to  which  It  iiistanci-s  must  <-onform  (Itihei'lt ance  rules  are  apiillca- 
!i|ej.  ()iie  (dijeci  is  a  siiiiiypc  of  another  If  and  only  if  they  are  dlstiiici 
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:iiul  necessarily  every  Instance  of  one  Is  an  Instance  of  the  other.  Objects 
may  have  attrlbntes.  An  attribute  Is  a  binary  relation  and  the  value  or  an 
attribute  Is  an  object  of  a  type  that  satisfies  the  Intension  of  the  blnar.v 
relation.  The  relation  Itself  has  various  attributes  Including  cardlnallU'. 

Hence  relations  can  be  mandatory  or  optional,  and  an  upper  bound  for  the 
number  of  Instantiations  of  the  relation  can  be  enforced.  An  attribute  Is 
either  a  property  or  a  component.  An  attribute  Is  a  component  If  a  change 
In  Its  values  for  a  given  object  actually  changes  the  Identity  of  that  object. 

.\  partition  of  a  given  type  Is  a  collection  of  subtypes,  constrained  to  shm-e 
no  Instances. 

.\  t^roccssor  Is  an  executable  object.  An  event  type  Is  a  type  that  signals 
the  transition  of  the  knowledge  base  from  one  stale  to  another.  Invents  are 
pi'oduced  by  processors  and.  In  turn,  can  trigger  other  i)rocessors. 

-Vctivlrles  are  hlgh-letel  k:x:>ks  at  parts  of  a  proce.ss.  -An  activity  produces 
products.  In  turn,  itrotlucts  are  In  consumed  by  activities. 

.A  diagram  is  a  collection  of  Instances  of  types  given  In  the  diagram’s  view, 
further  restricted  by  the  diagram's  space,  and  limited  to  a  partlciilar  realm. 
An  activity  diagram  conttilns  only  activities,  products,  and  the  relations 
produces  and  consumes.  .\  Processor  diagram  contains  only  |)roces.sors  and 
events,  and  the  relations  produces  and  triggers.  Proce.ssors  can  Ite  divh.led 
Into  action  processors  that  rnitsi  always  produce  an  event  and  decision 
processoi's  that  produce  an  event  only  under  certain  prcdenned  conditions. 
Concept  diagrams  ccmtaln  various  user-defined  types,  not  Includt'd  in  aciivlt.v 
or  iu'ocessor  diagrams.  Concept  diagrams  are  linked  to  activity  diagrams 
through  the  products. 

Processor  diagrams  are  linked  to  activity  diagrams  through  the  activities. 
.Activity  diagrams  are  linked  to  itser-deflned  subjects,  ('oncept  diagrams 
i-apture  dataflow  information.  Process  diagrams  capture  control  flow  informa¬ 
tion. 

The  I’.ADl.  ItiterpO'ter  supports  the  tiotlon  of  P.ADl,  matu'os  that  aceepi 
[ctr;im<-icrs  .-ind  :iri  ;i.s  functions. 


( 


12.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  describe  It 
briefly. 


The  paradigm  underlying  tlie  PadTech  Design  Core  Is  largely  compatible  with 
the  work  of  the  ISO  committee  for  Conceptual  Schema  (Ref:  "Concepts  and 
Terminology  for  the  Conceptual  Schema  and  the  Information  Base".  Interna¬ 
tional  Organization  for  Standardization  (ISO),  ISO/TC97/SC.a/VVG3.  March 
19S2,  copies  available  from  Secretariat:  A.MSI  (USA),  publication  number 
ISO/TC97/SC.")  -  X  t59.a). 

This  paradigm  combliit-s  elements  of  an  object-oriented  approach  with  logic 
programming  environments.  The  result  Is  a  proprietary  paradigm  which 
supports  not  only  "conceptual  analysis"  but  also  provides  an  Integration 
platform  to  control  the  execution  of  "conceptual  processors." 

The  actual  basic  model  uitderlying  the  product  Is  customizable.  Hence  the 
user  can  elect  to  hide  the  PadTech  paradigm  by  placing  some  other  method¬ 
ology  a.s  a  shell  over  the  packaged  basic  model.  Hence  the  i)r(,)ducl  can  be 
made  to  support  a  variety  of  standard  methodologies. 

13.  Describe  the  external  t(X)ls  with  which  your  system  Interfaces  (Ux)l 
compatibility). 

The  PadTech  Design  Core  includes  a  runtime  library  designed  to  tillow 
external  tools  to  communicate  with  the  i)rocess  machine.  .Any  i(X)l  c-:ipa!>le 
of  manipulating  string  |>aramcters  (character  data  type)  can  make  use  of  the 
PADL  Statement  Builder  library. 

This  -et  of  routines  will  generate  lb\DL  sta.tements  and  send  them  to  the 
[iroecss  machine.  It  also  facilitates  PadTech  knowledge  ba.se  (|ueries. 

H.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottorns-up,  both,  etc.),  architectural  perspectives  (desigtier 
creativity)  and  ob.lect-orlente<J  design. 

TIk'  Padd'ech  Design  ('ore  supports  the  anal.\sis  of  systems  in  a  manner 
-iiuilar  lo  that  used  in  nrost  objeei-orieiiled  .and  logic  programming  einli-on- 
inentx.  in  gf-neral.  the  em[)h:isis  is  on  conceptual  analysis:  i.e..  a  logical 
decomposition  of  the  |irol)iem  into  ;i  set.  of  ob.h'cis  .and  rel.atlons  between 
e'bjecis.  Pad'l'ecii  lakes  the  design  methodology  mucli  further  than  most 
ol i.iect -( ,fienl ed  or  |ogi<-  pfogra tti itti tig  tools  nml  even  inclndt's  a  met  hod  for 
■.er.'v'  hi':.li-|e\ei  ppuming. 
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15.  Is  your  system  supported  by  formal  syntax  semantics?  Describe 
brletly. 
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The  FatlTech  Design  Core  (letTnes  a  process  architecture  design  language 
known  as  P.\DL.  The  syntax  for  this  language  Is  formally  defined  by  the 
BXF-llke  Input  for  the  Unix  t(X)ls  LEX  and  YACC.  (YACC  accepts  specifica¬ 
tions  which  define  a  LALR(l)  grammar  with  disambiguating  rules.  The 
semantics  for  P.\DL  have  been  defined  In  predicate  calculus.  The  actions  of 
the  process  machine  (Inference  engine)  can  also  be  defined  In  predicate 
calculus. 

H).  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  <fe  maintaining  It). 

The  beta  revision  of  the  product  reciuires  a  .Silicon  Graphics  3010  terminal 
and  a  Data  General  DS/7.500  workstation.  The  total  cost  of  the  Silicon 
Gi-aphlcs  hw/sw  is  approximately  $-1(5.110.  The  total  cost  of  the  Data 
General  hw/sw  Is  approximately  $31. .'>20.  The  initial  cost  of  ADT's  software 
product,  the  PadTecli  Design  Gore,  is  $3.5.(K)0.  Monthly  support  cost  for  the 
Design  Core  Is  $3.')0. 

17.  Indicate  the  hostablllty  (measure  of  degree  of  portability)  of  your 
system. 

.\DT  intends  to  [)ori  the  FGd'rech  Design  Core  product  to  a  mmil)er  of 
systems  In  1087.  I'hc  product  Is  written  in  Common  Lisp  and  C  to 
facilitate  [lorting  activities.  .At.  tills  time,  the  product  Is  available  onl.v  In  the 
Silicon  Graphics  -  Data  General  configuration  described  above. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/represcn- 
tatloms  (1.0. ,  systems  engineering,  software  engineering,  hardware  engineering). 

The  Pad'l'cidi  Design  (  ore  Is  Intendt'd  to  be  interdisciplinary.  It  iiromotes 
the  notion  of  a  jirocess  architect.  Pail'l't'ch  proces.ses  can  be  im|)lem<'ntei|  In 
coinpuii'i'  -oftware  and  hardware,  physical  systems,  or  people.  d'he  sxinbols 
.and  icrminologv’  chosen  to  represent  the  process  <|('sign  art'  customizabh'  b\ 
the  procf'ss  archlK'ci.  'I'herefore.  the' tool  can  Ix'  used  b\'  ;i  \'ari('t\’  of 
evp-erts  (engineei'ing  or  ot  liei'Wlse ). 
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19.  How  complete  Is  the  methodology  -  do  Its  principles  embody 


-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  project  control  methodology 
-A  management  methodology 
-All  of  the  above 

j'lie  I’mlTecli  De.slgn  Core  embodies  a  planning,  design,  development  and.  to 
'onie  extent,  a  programming  methodology  (all  hough  the  emphasis  is  at  a 
^V'<tem  level  and  is  not  necessarily  applicable  on  the  traditional  algorithmic 
h'vel  of  3Cd.  structured  programming). 

'File  PadTech  Design  Core  does  not  enlorce  or  assume  a  itarricular  project 
i-ontrtjl  or  management  methodology. 

20.  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/users). 

The  Pad'I'ech  Design  Core  Revision  l.oo  has  been  Implemented  on  a  single 
uM'i'  workstation  (one  station  per  itser).  Full  multi-user  (team)  access  to  a 
-'ingle  design  kiK-iwleflge  base  will  be  available  in  Revision  2.00  expected  to  go 
to  Deta  test  in  .June  of  1987. 

21.  Describe  how  your  system  supports  design  trade-olTs. 

The  Paddh-ch  Design  Core  provides  a  sysipni  architect  with  a  \'cr>'  powerful 

'(•I  of  tools  to  facilitate  the  production  of  dynaiulc.  flexible  process  designs. 
The  architect  is.  therefore,  able  to  modify  designs  or  tf\'  new  ap|)roachcs 

\a'r\’  easily. 

22.  Indicate  the  range  of  problems  to  which  the  .system  can  be  applied. 

Till'  Padd'ech  De-'lgti  (  ore  is  a|>plical)|e  to  a  widi-  range  of  prot)lems.  It  is 

hi'.t  iis(.(|  tor  ver\'  large,  complex  systems  with  a  high  dt-gree  of  coticurrenc\' 
r''<iulre'l.  .\n\’  process,  eomiuner-based  or  otherwise,  can  be  aual\'7,eil  oi' 


2;}.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  major 
users  of  your  system. 

As  of  .J;munr\'  1.  1987,  only  an  Alpha  version  of  the  Design  Core  has  been 
released,  'flie  Beta  version  of  the  product  Is  expected  to  be  released  by 
Febrnary  1.  1987.  and  Revision  l.(X)  Is  expected  to  ship  by  .April  1.  .-VDT 
lias  two  .Alpha  customers  listed  below: 

1.  Data  Clenci'al  Corporation 
-ATT.X:  Deter  Doonan 
1 100  Computer  Drl\e 
W'eslboroiigli.  MA  01580 
Rhone  ((il7)  870-63  18 

(foopei's  C  l.ybi'and  .-Vssoclates  Ltd 
.VT'PN:  Halts  Delter  Scholz 
Rlumtrei'  (.'oiirt 
I.ondon  FC-I.A  IH'I' 

Rhone  01-583-5000 

.\ote:  It  R  (he  Intmitlon  of  Data  General  to  both  use  the  product  Internally 

to  help  meet  the  mauls  of  their  corporate  MIS  group  and  to  market  the 
product  In  both  the  commercial  and  federal  marketplaces. 

(■oK)|iers  A  I.,\'hi‘and  C.K.  has  successfully  u.sed  the  product  In  their  role  a.s 
'■oiiMiit ant.s  to  the  British  Royal  .X'avy.  They  Intend  to  use  the  product  in 
\arious  other  consulting  pro.iects  both  within  Great  Britain  and  the  rest  of 
If  u  rope. 

Rot  It  DC  and  C.VL  can  provide  further  information  conctumlng  their  use  (or 
tluir  erKMlI"-'  Hue)  of  the  pfodUCt. 


AD  CAD,  liic. 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

By  Us  \'ei’y  nature,  the  descriptions  and  s[)ecincatlons  In  Sd'Ad'IaMhhXl'l  s 
visual  lan'^ua'^e  are  precise,  yet  clear  and  comprehensive,  and  thus  allow  for 
relatively  eius\'  manual  detection  of  design  errors  and  Inconsistencies  froni  t  h(‘ 
earliest  stages. 

'Fhe  descriptions  are  coinpletel\'  'understood'  by  S'lWTl'j.MEN'l'l .  thus  allowing 
for  automatic  testing  and  simulations  of  the  .system  under  description 
(henceforth,  the  STD)  right  from  the  start.  Conse(|uently.  even  If  the 
description  at  a  glvcut  point  In  time  Is  veiw  high-level  and  lacking  most 
lo\v-le\-el  details.  It  can  be  simulated  and  tested  for  consistency-.  com|)letene-.s 
and  many  additional  nontrivial  pro]M‘rtles  at  the  level  of  detail  that  hai>i)ens 
to  be  available. 

2.  What  type  of  progress  metric  <l(Xts  the  system  produce'^  Is  It  (luantin- 
able  metistire  of  complete[ics.s? 

STATlcMBN'r  1  does  not  j)rovide  any  exi)liclt  progress  metric.  We  d(;  not 
really  lielieve  that  the  distance  I'rotn  an  ultlnnite  final  speclllcatlon  can  be 
measured  by  na!\-'-  numerical  meatis.  Otie  can  label  entitles  in  s'l'A'l'Is- 
.MlwX'l’l  as  'not  fiilly^  speciHed  yet'  and  count  how  many  such  remain,  and 
similai'ly  one  can  count  the  levels  of  detail  already  i)resent  In  the  description 
and  try  to  estlmatt-  how  iintch  deeper  the  llnal  description  will  go.  Oi)\'lous- 
ly.  however.  >uch  metrics  cannot  be  overly  significant. 

h.  Describe  how  yonr  system  stipports  documentation,  program  management 
and  control. 

-''rA'ri  lMh.X'ri  proa-ldc'-  extensive  doenimmtal  Ion  I'a.cilltle'^.  liieludiiig  ^e\  eral 
l<lii(U  graihileal  imr|mis.  Hxed  formal  documenls  (such  as  daia  dieiionarle^. 
i  li!  I'rfaee  doeilllielil^,  .\-^(|liare  epart^.  elc.)  and.  ill  I  IlC'  Hear  future,  also 

Tilled  doeiiiiienis  that  will  he  able  to  adhere  to  the  many  siandanls 
III  tp!'  fii'M.  'I'pe  main  iioini  to  note  is  tliai  .'S'l'.V'ri'hMl'hX'l' 1  eoiiiaiiis  and 
uii.l.T'taiiil'  a  \  act  amount  of  intricate  Information  ahoiii  tlie  si  laicl  iii'e. 
f>i,i,a aeiii' y .  iaia-flow.  ami.  noial)ly.  dyiiamle  hepavlor  of  the  stn.  p  ran 
•pi;.  ‘A’  I  Ic.it  Infi  ii'mai  l<->n  either  <‘XplicUly  \isiuv  a  iiowerl'iil 

■  jl'';,  a!;_ua_  a  I'  impli'-illy  U-lll'J.  d"ei||iienl  ge  i  |era  I  lo  1 1 . 
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STATE.MENT1  will  support  ronveiitlonal  project  maaaitement  racllllles. 
iiiclutlliig  version  ccuurol  and  limited  user  access  when  working  In  a  multiple- 
user  environment. 


•1.  Describe  how  your  system  supports  real  time  design. 

STATE.MEXTl  was  ileslgned  with  complex,  computer-embedded  real-time 
systems  In  mind.  It  Is  diniciilt  to  describe  the  entire  approach  In  a  few 
worils.  but  It  might  sufnce  to  say  that  STATEMENT  1  utilizes  a  novel 
formalism,  statecharts.  for  the  behavioral  description  of  such  systems, 
statecharts  are  described  In: 

D.  Harei.  "Statecharts:  .\  visual  I'ormalism  for  Complex  Systems.”  Science  of 
Computer  Programming  8  (1087).  to  appear. 

'rime  (and  real-time  in  particular)  is  captured  In  statecharts  by  special 
tlitieout  events  that  are  used  to  limit  the  time  of  being  In  a  state,  waiting 
for  an  event,  executlitg  an  :ictivlty.  etc.  Since  essentially  all  entitles  In 
ST.VTEMEN'Tl  are  multi-level  and  hiernrcJileal.  including  (among  other  things) 
States,  events  and  activities,  the  expressive  power  of  these  timing  specltlca- 
tlons  Is  very  rich.  It  goes  without  saying  that  the  simulation  and  testing 
capabilities  take  the  timing  constraints  fully  into  account. 

5.  Describe  how  your  syst...ii  supports  concurrency,  parallelism. 

Again,  dealing  with  the  concurrency  and  parallelism  Inherent  In  complex 
s\-stenis  Is  among  the  main  eonceriis  behind  the  ST.ATEMENTl  system.  In 
f:iet.  one  (;f  the  main  featurt-s  of  staxecharts  Is  the  extension  of  nnite  state 
machines  :ind  their  diagrams  to  cater  for  concurrent  state-components,  on  all 
le\-els.  via  the  orthogonality  construct.  'liils  removes  a  major  obstacle  from 
the  use  ctf  tim  ver.\'  iiatuiml  st at''-ba.ved  formalisms  for  reall\’  comidex  systems 
-  the  state-space  explosion  phenomenon. 

(5.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

No.  can  be  compile(l.  in  principle,  into  any  high-level 

progrmn ming  language,  and  for  that  matter  also  Into  microcode  or  silicon, 
its  database  lic'lds  all  Infornmtlon  hi  a.  slmide  internal  format  suitable  for 
manipulation  hi  aii\'  snep  language. 
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7.  D(X)s  you  system  produce  Ada  PDL? 


o 


Not  yet.  although  the  production  of  Ada  PDL  should  be  possible  In  a  few 
months.  The  dimculty  Is  In  the  rich  expressive  power  of  the  languages  of 
STATE.MENTl  relative  to  Ada  PDL.  A  subset  of  the  STATEMENTl 
languages  that  matches  the  capabilities  of  Ada  PDL  more  closely  could  be 
ti-eated  for  Ada  PDL  production  quite  painlessly  In  a  very  short  time. 

8.  Describe  how  your  system  supports  life  cycle  lntraphji.se  &,  Interphasc 
com  Ill  u  nlc  Jitlons. 

It  does  by  being  liased  on  languages  that  are.  on  one  hand,  clear  and 
en.'^y  enough  to  serve  ;is  the  lingua  franca  of  the  preliminary  specincatlon 
phases  of  the  life  cycle,  even  those  parts  carried  out  liy  the  client  or 
potential  user.  and.  on  the  other  lutnd.  precise  and  rigorous  enough  to  be 
fully  simulated  and  teste<l  as  a  prototype  of  the  Hnal  Implemented  system. 
Descriptions  of  the  SIT)  on  varying  levels  can  thus  be  communicated  between 
groups  and  across  [)hase  boundjtrles.  since  they  are  all  cai'rled  out  In  the 
^amc  three  graithlcal  languages,  and  are  supported  by  the  very  same  system. 

9.  •  Is  your  system  automated,  executable,  compilable? 

)'cs.  yes  and  no.  ST.\TEMENTl  is  fully  automated  as  explained  above.  It 
E  execiitalTe  In  the  sense  that  Its  descriptions  can  be  'run'  Iti  itreclse 
--imulatlons  of  the  desired  SID's  behavior.  Inchifllng  Indications  cd'  the 
functions  and  tictlvitles  being  carried  out.  the  data,  and  control  signals 
flowing,  the  conuH'iients  and  subs.vstems  active,  ami  the  changes  tlutl  take 
pbicf  ill  modes,  states  and  conditions.  It  is.  as  of  now.  not  directly  comitil- 
able  inio  code,  though  work  on  compilation  Into  .-Vda  Is  underway. 

10.  Describe  the  grjiphics  support  for  your  system. 

Ild-e.  !(x;.  ilm  topic  begs  for  an  extensive  response,  which  is  beyond  the 
-(•e.|ie  'if  tlie^e  :;otes.  Actually,  to  say  that  S'J'ATE.MENIT  'Ims  graphic 
.iipP'  i-i'  is  ;i  d'oss  uttderstatemeni.  -  It  is  really  a  graiihictil  systetn  par 
’■'■.<■|•llatlee.  The  utiderlvltig  phllosoph.\'  of  S'l'A'^l'EMENTT  Is  not  that  I'orint'l 
’ !< -'  rii,!  ions  'hould  be  sttpplemented  l)y  grtiphics.  but  that  they  shoitid  be 
itiiii'l;.  graphical.  S'r.X'l'EMENT  1  allows  for  the  speclllcatlon  of  the  sl'l) 
from  three  eoinpleineiit  ary  atid  interrelated  points  of  \1('W,  t  laict  iiral. 

I'm  net  ioiii.-il  .Mild  belno  loral.  and  each  Is  des(a'ibe(i  using  a  novel  dlagi'a m  ma t  ic 
language  ( I'e.- 1  m  cl  i  \a  dx' .  iiiodiiie-eharts.  act  i\it  y-chai't  s  and  st  a  I  eehart  ^  ).  The 
iaiignage".  Iia.e  -exaa'al  eommon  featur*"'.  iiicliiding  liierarchx'  depicie'l  by 
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encapsulation.  modularUy,  mulM-level  connections,  etc.  The  graphic  editors 
suppi^rt  tlie  usual  kind  of  Insert,  delete,  zoom,  pan,  scroll,  move  and  copy 
InstiMicrlous.  In  a  menu-driven  way.  with  the  system  translating  all  graphical 
Information  Into  Internal  representations  In  Its  database. 

11.  Describe  how  your  system  supports  concepts  of: 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-Typing 

-Evolutionary  development 

-Generics 

-Macros 

-Data  flows 

-Control  flows 

In  a  way.  STA'PE-MEXTl  can  be  claimed  to  support  most  of  these  concepts, 
though  not  always  explicitly.  STATEMENTl  delTnltely  provides  both  early 
and  rapid  pi’otoryplng.  by  the  formal,  precise  and  fully  detailed  simulations, 
as  explained  earlier.  Reusability  and  macros  are  supported  Insofar  jts  the 
descriptions  are  hlghl\‘  modular,  and  thus  can  be  ‘plugged  Into'  many 
dirferent  places,  and  reused  In  other  contexts.  This  applies  to  states 

( 'belnwloral  macros')  activities  ('functional  macros')  and  even  components  and 
modules  Ci.ihyslcal  macros').  Information  hiding,  packaging  (Indirectly)  and 
absti'action  are  supported  by  virtue  of  the  'deep'  hierarchical  nature  of  all 
STATEMENTl  descriptions.  F'or  example,  activities  Impose  strict  scoping 
rules,  not  unlike  those  found,  (e.g..  In  Pascal  or  Ada),  so  that  internal 
(■\cuts.  conditions,  signals  and  data  are  hhlden  from  higher  levels  and  exterior 
entities.  Data  and  (-(uurol  flow  are  ba.slc  to.  respectively,  activity  charts  and 
■-I  aiecharts.  and  show  up  very  clearly  In  the  grai^hics.  as  well  as  In  the 
'^iniulaiions  and  the  reports  and  documents, 

12.  Is  there  a  paradigm  embedded  In  your  .system':’  If  .so,  describe  It 
briefly. 

No.  none  of  the  usual  (ovcrkUleil )  ones.  We  bcllevt'  In  clear,  precise  and 
'imul:it:d)lc  descriptions  of  all  aspects  of  the  Si 'D.  with  a  nrm  commltmcnl 
to  wliai  one  mlglit  call  'visual  formalisms'  i.c.,  formal  diagranimallc  languages. 


13.  Describe  the  external  tools  with  which  your  system  Interfaces  (tool 
compatibility). 
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STATEMENT  1  does  not  interface  with  other  tools. 

H.  Describe  how  your  system  supports  hierarchical  decomposition  and  now 
direction  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  object-oriented  design. 

As  discussed  above,  hierarchical  descriptions  form  one  of  the  cornerstones  of 
STATEN  [ENT  1.  The\'  can  be  utilized  In  top-down,  bottom-up.  Inslde-out  .  oi- 
mixed  fashions.  The  user  of  ST.A.TEMENT1  Is  supposed  to  be  a  highly 
trained  professional,  and  since  STATEMENTl  does  not  Impose  any  rigid 
recipes  or  lemiMaies  foi-  making  progress,  the  designer's  creativity  Is  as 
Important  as  anytltlng  else.  Object  oriented  design,  though  not  a  central 
concern  in  the  conception  of  STATEMENTl,  Is  possible  using  separate 
activities  for  se|)arate  objects,  and  specifying  their  Interrelationships  via  the 
controlling  st at ec harts. 

if).  Is  your  .system  supported  by  foroial  syntax  &  semantics'?  Describe 
briefly. 

Dellnltely.  Each  of  the  three  graphical  languages  has  a  precise  graphical 
(and  hence  also  textural)  syntax,  and  a  formal  mathematical  operational 
semantics,  .\ctl\ity  charts,  for  example,  specify  'possible'  data-flow,  an 
unusual  conce|)t  which  alUwvs  their  statechart  to  control  the  actual  d\-namlc 
data-flow.  Statecharts  have  (pilte  a  novel  semantics,  that  is  described  In 
detail  In: 

D.  llarfj.  A.  Pnueli.  .1.1*.  Schmidt  and  R.  Sherman.  "On  the  F'ormal  Seman¬ 
tics  of  Statecharts."  submitted  for  |)ubllcatlon. 


10.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

The  basic  '-oftwari'  package  costs  around  $15K  per  gra|)hlc:il  workstation,  with 
various  add-ons  (e.g..  testing  ami  simulation  modules,  project  management 
routines.  <■[(•.)  cfjsiing  between  $’_’l\  and  $I()I\  each.  d'he  price  includes 
iraiiiiiia  and  inalni en:mce. 
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17.  Indicate  the  hostabillty  (measure  of  degree  of  portability)  of  your 
system. 


STATEMENTl  Is  written  mainly  In  Pascal,  and  currently  runs  on  a  V'ax  or 
Mlcro\'ax  with  a  VAIS  operating  system  and  a  color  Tektronix  graphical 
terminal.  \'erslons  running  on  Vax-Statlon,  Sun,  Apollo  and  IBM  workstations 
are  forthcoming.  A  standard  plotter  and  an  additional  alphanumeric  terminal 
are  recommended. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/rcpresen- 
tatlons  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

STATEMENTl  utilizes  clear  graphical  languages  for  precise  speclHcatlon  and 
analysis.  These  languages  transcend  the  differences  between  the  various 
relevant  engineering  disciplines,  a  fact  that  has  been  thoroughly  proved  in 
three  yeai's  of  work  with  the  languages  by  a  large  and  hetei'ogeneous  team 
of  engineers  In  the  Lavi  avionics  project  at  the  Israel  .Vircraft  Indnsti-ies. 

Tints.  ST.VTEMENTl  has  been  demonstrated  to  bridge  the  gaps  and  span 
the  differences  In  approach,  mentality  and  communication  metlia  of  software., 
hardware  and  systems  engineers. 

19.  How  complete  Is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-A  programming  methodology  only 
-A  [)roject  control  methodology 
-A  management  methodology 
-All  of  the  above 

s'I'ATEMEN'IT  provides  a  n<mel  and  complete  specincatlon  and  design 
met  liodol()g\ .  It  does  tiot  touch  upon  the  programming  problem  |)er  se. 
fxcept  insofar  as  sTA'rivME.NTl  descriptions  can  lead  (\la  direct  dowuwai'd 
I'om pilai  ion )  to  llnal  working  code. 

20.  Describe  how  your  .system  supports  a  team  development  approach. 
(Number  of  statlotis/u.scrs). 

^'fATEMEN'I’l  Is  suited  ideally  for  a  nund)er  of  workstations  (■'a\'.  beiweeii  2 
and  2-")|  linked  \!a  :i  network,  with  or  without  a  ma.inframi'  in  ilu'  batdt- 
zroiind.  It'  pr''ji'ci  uuiiiagenieni  facilities  will  be  tallorable  towards  such 
Is:i||i  flTorl--. 
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21.  Describe  how  your  system  supports  design  trade-olTs. 

Since  the  descriptions  resulting  from  working  with  STATEMENTl  are  on  a 
level  higher  than  conventional  software,  hardware,  microcode,  etc..  STATE¬ 
MENTl  transcends  this  division  too.  Its  descriptions  can.  In  principle,  be 
compiled  Into  software  In  a  high-level  language.  Into  microcode  or  other 
low-level  formalisms,  and  even  directly  Into  silicon.  For  Ideas  on  the  latter 
see: 

D.  Druslnsky  and  D.  Harel.  "Statecharts  as  an  Abstract  Model  for  Digital 
Control  L'nlts."  CS86-12.  The  VV'elzmann  inst.  of  Science.  Rehovot.  Israel. 
Submitted  for  publication. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

STATEMENTl  can  be  used  for  the  specincatlon.  analysis  ami  design  of  any 
complex  reactive  system.  Reactive  systems  ap!)ear  In  a  wide  si)ecti-um  of 
ap[)Hcatlon  areas.  Their  complexity  stems  from  many  diverse  discrete  events 
and  conditions  that  control  their  behavior.  Examples  Include  avionics  and 
weapons  systems.  VLSI,  communication  networks  and  protocols,  process  and 
c(.)ntrol  systems,  and  so  on. 

22.  List  the  names,  addresses,  and  phone  lujinbers  of  live  (customers)  major 
users  of  your  system. 

Dr.  't'onah  Lavl 

.Manager  RVD  Computer  Systems 
Israel  .\1  re  raft  Industries. 

Lod.  Isimel 

T*'l:  072-:5-07i;l7lO 


.Mlrlir:il  /('..vl 

l)i\  .  I  f  ad  for  Software  N  Electronic  Warfare 
EI.TA  I'laul  Electronics  IndustrU-s  Ltd. 

El'-'-i  Ill'-'  I  tivFion 
X- i idi  d.  l-racl 
T'  !:  '.i7-_’-.'..v:t( )7;ts 

Jar.  d  llailR 
Ml  t  1  i(  If  .|(  .r  IcS 

El-t)p  Elect  I'o-t  )pt  Ics  Industries  Ltd. 

'-ci.  iicr  IPi.'i'd  I’ark 

Kir.x  at  \\  i  izuiaiiii.  Reh'.i'.'ol .  Israel 

'I'fl:  u7'_'-s- mc.70ii. 
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1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 


. 

V- 


-■VDAS  supports  consistency  checking  at  sev^eral  levels.  The  llrst  basic 
consistency  checks  take  place  during  the  system  design  and  definition  capture 
phase,  using  the  .ADAS  Interactive  graphics  editor.  On  both  single-level  and 
multi-level  systems.  .-ADAS  checks  for  flow  and  type  consistency  between 
functions  and  between  levels.  .More  detailed  consistency  checking  Is  done 
using  the  .VD.-VS  consistency  checking  tool,  which  also  checks  functional 
consistency  against  the  reusable  templates  from  which  the  functions  are 
modeled. 


■  ■ 


Due  to  the  versatility  of  .VD.A.S  In  defining  s.vstems  at  any  hierarchical  level 
and  to  any  deslreri  level  of  detail,  it  Is  possible  to  do  top-down  system 
design  and  simulation  at  each  level  and  at  any  phase  of  the  design.  In 
doing  so.  the  designer  can  determine  the  degree  of  system  completeness  based 
th.p  system  requirements  and  specifications. 


ADAS  catches  system  conceptual  design  errors  In  the  early  stages  of  develop¬ 
ment  through  the  use  of  consistency  checking  and  Petri  Net  simulation. 

Other  errors  are  detected  through  hierarchical  analysis  and  simulation  as  the 
system  Is  defined  In  Increttslng  detail.  Depending  upon  the  degree  of  detail 
to  which  the  system  is  defined,  logic,  processing,  and  coding  errors  can  be 
detected  via  the  .AD.AS  modeling  and  simulation  process. 

2.  What  type  of  progress  metric  does  the  system  produce?  Is  It  quantifi¬ 
able  measure  of  completeness? 

At  the  present  time.  .ADAS  provides  progress  tracking  and  reporting  through 
performance  simulation.  The  designer  ha.s  the  fle.xlblllty  to  detei'inine  the 
degree  of  detail  and  completeness  at  whhdi  he  desires  to  morlel  and  analyze. 
Plans  are  nearing  completion  for  a  system  requlrements/speclficallons. 
documentation,  and  pi'ogress  tracking  system  that  will  be  a  |)art  of  the 
AD.AS  svsteni. 


3.  Describe  how  your  system  supports  documentation,  program  management 
and  control. 

FvTI  uses  the  pi'esent  .VDAS  system  to  develop  documentation  and  manage 
programs.  However,  at  the  present  time,  no  speclHc  documentation  or 
program  management  t(X3ls  are  part  of  .AH.AS.  .-Vs  described  above,  a  system 
Is  being  Implemented  that  will  allow  changes  made  to  documentation  or  the 
system  design  to  be  reflected  Into  the  other. 


1.  Describe  how  your  system  supports  real  time  design. 

.\D.\S  supports  a  design  methodology  which  promotes  the  co-design  of 
■'(M'tware  and  hardware.  To  represent  real-time  analysis  and  simulation  of  the 
defined  system.  .VDAS  allows  software  functions  to  be  assigned  to  hardware 
modules,  thus  representing  real-time  hardware  constraints  and  real-time 
software  contention  for  shared  hardware. 


5.  Describe  how  your  system  supports  concurrency,  parallelism. 

'Fhe  .-VD.VS  methodology  r)rmnotes  the  codesign  of  software  and  hardware. 

In  defnlng  the  two  separate  systems.  It  Is  possible  to  defne  concurrent 
and/or  parallel  functions.  Tlie  .-VD.-VS  tool  set  operates  on  whatever  system 
has  lieen  defned  and  captured  so  as  many  concurrent  and  parallel  processes 
and  functions  as  needed  can  be  defined,  analyzed,  and  simulated. 


b.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

Ald.vs  currently  supports  as  programming  languages  Ada  and  C.  niid  supports 
harrlwai’e  description  languages  Helix  and  RTl  Is  under  conii-act  to 

the  .\avy  VHSlf  f’rogram  to  add  supi)ort  of  the  VTIDL  hardware  description 
language. 

'I'he  source  language  of  .VD.VS  is  C  with  the  .Vda  Interface  written  In  .-Vda. 


Dcx;s  you  .syslom  prcKlucc  Ada  l‘DI/? 


VD.VS  allows  Tor  the  designer  to  code  fuiietiouallty  in  .Vda.  for  individual 
■^ortwarc  modules.  An  .VD.VS  program  then  generates  .Vda  cod('  to  control 
111''  operation  .and  interconneci Ion  of  the  Individual  modules. 


8.  Describe  how  your  system  supports  life  cycle  Intraphase  &  Interphase 
communications. 

ADAS  Is  designed  to  be  used  from  the  very  beginning  of  the  design  process. 
At  any  point  In  the  design  phase,  designs  can  be  saved  and  modincatlons  to 
the  s\stein  can  be  studied.  Once  the  system  Is  In  other  phases  of  the  life 
proposed  inodlHcatlons  can  be  reflected  In  the  rVDAS  model  before 
aetiial  changes  are  Implemented  In  the  system. 

9.  Is  your  system  automated,  executable,  compilable? 

^■es.  all  (d'  the  altove.  .ADAS  tools  are  automated  to  the  point  where  a  user 
<-an  ea-ciiy  capture  designs  and  analyze  systems.  .ADAS  is  also  executable,  so 
that  a  user  can  do  complex  simulation  and  performance  analysis  with  very 
little  Intetaentlon.  When  a  system  design  Is  dellned  to  a  level  of  detail 
where  each  function  can  be  described  by  a  block  of  code,  these  functions  can 
be  represented  by  the  code  which  Is  compiled  and  l.'ecomes  part  of  the 
sx'stem  definition. 

10.  Describe  the  graphics  support  for  your  system. 

1'he  ina,lorlt.\'  of  the  .AD.AS  design  Interface  Is  graphical.  The  graphics  editor 
is  used  to  capture  and  edit  the  system  design.  Systems,  -functions,  and 
htterctmnects  can  be  dellned  graphically.  .A  graphics  terminal  and  a  mouse 
are  reciulred  for  even  Imslc  system  design.  .AD.-VS  simulation  tools  have  an 
optional  gi-ai)hlcal  output,  thus  providing  a  visual  analysis  of  the  data  and 
control  flow  during  simulation  of  the  system. 

.\DAS  runs  on  a  wide  range  (.)f  graphics  devices  from  workstations  such  a.s 
the  \'axstatlon  ll.  Micro  Vax  II(GPX).  and  Sun  S/lOf)  to  low  cost  coku’ 
gra[)hics  terminals  on  multi-user  l.'NfX  and  \AIS  computers,  such  a.s  the  \'nx 
S()(X). 

11.  Dc.scrlbc  how  your  system  supports  concepts  of: 

-lOarly  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-'I'yplng 

-lO volutionary  development 
-C  ienerics 


m 
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-Macros 
-Data  Hows 
-Control  flows 

-\DAS  supports  prototyping  by  allowing  a  designer  to  model  a  system  by 
entering  performance  Information  as  opposed  to  a  complete  structured 
dfsci-lptlon.  Feasibility  studies  can  be  done,  modeling  several  alternative 
architectures  and/or  algorithms,  before  a  candidate  system  Is  selected  for 
functional  modeling.  Thus,  with  the  .\DAS  .system  both  early  prototyping 
and  rapid  prototyping  can  be  done. 

.Mb.AS  alU'ius  software  blocks  describing  functions  to  be  reused  where  the 
-^ame  or  .‘Similar  function  occurs  for  functional  simulation. 

Fsing  .\D.'\.S  hierarchical  modeling.  It  Is  quite  ea.sy  to  hide  Information  In 
lower  levels  of  a  design. 


.\D.\s  supiK)rrs  the  .\da  packages. 

Lto'cls  of  abstraction  can  be  modeled  ea.slly  using  the  .ADAS  hierarchical 
St  ruct  lire. 

.\s  part  of  the  system  design,  functions  and  Interconnects  can  lie  ty|)cd. 

T\ pe  matching  of  model  functions  and  Interoon-nects  Is  part  of  the  conslsten- 
c\'  checking  that  Is  done. 

AD.AS  allows  design  from  the  very  highest  system  level  down  to  the  most 
detailed  level  of  the  s,\’stem.  Changes  at  any  level  In  the  system  hierarchy 
are  reflected  throughout  the  entire  .system  design.  Designs  at  any  point  can 
bi'  eapt  iii-ed  and  saved  for  later  comparison. 

•  Ml  .\I).\s-denned  systems  are  created  using  a  basic  .set  of  reusable  teinplates. 
iliu"'  i>ro\i(llng  a  continuity  l)a.sod  on  the  standardized  templates.  New 
templates  i-an  lie  created  .and  added  :us  the  designer  requires.  The  use  of  ;i 
'pcciric  s(.|  of  tettiphiies  provides  standardization  across  the  system  (h'sign. 

I  scr-written  macros  are  supported  in  many  of  the  .AD.-Vst  tools. 

Data  :ind/(-i'  control  flows  are  re|ir(-setU eil  by  interconnects  betwt-eti  fiitictlons 
'  Iiardv  are  modules.  ( 'harad (M’lst Ics  such  tts  (|tt(Mtes  can  also  bc'  a.ssoeiated 
'Allil  I  lie  flow-,. 
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12.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  describe  It 
briefly. 

■■VDAS  Is  based  on  a  structured,  hierarchical  system  design  methodology  and 
supports  this  methodology  through  the  use  of  an  Integrated  set  of  software 
tcxtls.  A  major  feature  of  the  methodology  Is  the  co-design  of  software  and 
hardware  and  the  Integration  of  both  Into  a  resultant  system. 

13.  Describe  the  external  tools  with  which  your  system  Interfaces  (tcx)l 
compatibility). 

Helix  and  ISPS:  ADAS  provides  an  Interface  to  both  of  these  hardware 
description  languages,  allowing  hardware  module  descriptions  to  be  written  In 
:)nc  of  these  hingitages  atul  used  In  functional  modeling. 

\  HDL:  \  ia  a  Navy  XTISC  Program  contract.  .‘VDAS  will  s(X)n  be  able  to 
generate  \’HSIC  flardware  Description  Language  through  hardware  functlotial 
■'inutlation  using  a  hardware  description  language. 

silicon  Conipllers'  CiE.NLSlL:  Twoway  Information  exchange  of  hardware 
ilesci-iptlon  Informaium  allows  generation  of  Integrated  circuit  mask  data  and 
functlotial  simulation  of  the  resulting  chip.  Information  area,  power  consttmp- 
tioti.  etc..  :u-e  rei)(u’ted  liack  to  the  system  designer. 

H.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottorns-up,  both,  etc.),  architectural  perspectives  (deslgtier 
creativity)  and  object-oriented  design. 

Till'  ADAS  design  capture  and  editing  t<x)ls  provide  an  easy  method  of 
denning  a  hierarchical  system  moflel.  Once  a  top-level  tnodel  has  been 
deilned.  etich  functi<.)n  withlti  that  level  can  be  deHned  In  more  detail  b\- 
ereatliig  a  new  grtiphical  model  re|)resentlng  that  speclHc  function.  'Fliis 
process  c:in  be  done  continuously  at  eatdi  level  until  the  desired  h-vel  of 
I'tiiil  has  been  attained.  When  simulating  or  analyzing  the  s.vstein.  the 
dennition  of  the  hiei'artdiieal  models  can  be  reflected  all  the  way  batd';  up  to 
til"  iop-iiio''t  iiKalel.  thus  attaining  a  more  realistic  system  t'lew  by  using  the 
pel  loiaminee  inlortiiatlon  pa.ssed  up  from  the  lower  nuxlels. 

There  are  no  resi  rid  ions  on  the  t.vpe  or  style  of  designs  that  can  be  deilned 
|i\  the  1  |e.-ie i||.r  ill  either  sortwafe  or  hardwaiau  Designs  can  dwil\’  Ik- 

‘\eliairj,e(i  I'.ii-  other'-  to  allow  eonipttrlson  of  dlfferetit  architectures  or 


If).  Is  your  system  supported  by  formal  syntax  &  semantics?  Describe 
brlelly. 

ADAS  uses  a  graplilcal  representation  rather  than  a  langtiage-b^ised  represen¬ 
tation. 

1(5.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

Cost  on  a  \'ax  11/7-50  -  11/780  class  machine  Is  $50K/user  with  a  $10K/yeni- 
nialntenanee  fee.  On  \'ax  86(K)  cla.s.s  machines,  the  cost  is  .'jilCKJK/iiser  and 
maintenance  is  $20K/year.  A  four-day.  basic  and  advanced  training  coui-se 
would  cost  $  1700/person. 

17.  Indicate  the  hostablllty  (measure  of  degree  of  portability)  of  your 
system. 

.VDA-S  will  run  tinder  DEC'S  \AI.S  operating  system  or  C.MIX.  Workstations. 
Including  X'axstatlons  II.  .MlcroX'ax  ll(ClPX).  and  Sun  3/100  are  supported. 
Work  IS  under  way  to  port  AD.AS  to  the  .Apollo  workstations. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/reprosen- 
tatlons  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

'['lie  met  h(.)d(Mogy  on  which  .AD.AS  Is  based  stipports  system  design  by 
decomi'ioslng  the  system  into  separate  .software  and  hardware  tleslgiis.  'Phe 
two  are  then  combined  to  form  the  Integrated  system  design,  d'lius.  tlie 
imthodology  supports  mulil-dlsclpllnary  design,  allowing  computer  arcliltects 
and  software  engineers  to  work  In  parallel  on  Die  design.  Eaeli  can  imdei- 
-’taiid  the  .AD.AS  reiu’csont ations. 

HI.  ifow  complete  is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 
-.A  programming  methodology  only 
-A  project  eotitrol  methodology 
-A  management  methodology 
-All  of  the  above 
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The  mechodology  Is  complete  in  the  area  ol  system  design  and  development, 
ami  the  area  of  software  program  design.  .AJh.VS  Is  structured  so  the 
designer  detlnes  the  system  jis  Interconnecting  functions,  thus  enforcing  a  very 
structured  design  discipline.  Project  control  and  management  tools  are  In  the 
Initial  design  stages. 

2().  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/ users). 

.\D.VS  allows  any  number  of  users  and  Is  set  up  so  that  porthms  of  the 
system  can  be  developed  Independently  and  later  Integrated  together  to  form 
the  total  system.  This  allows  users  with  different  areas  of  expertise  to  work 
Imlependently  of  the  total  system  before  bringing  it  all  together. 

*21.  Describe  how  your  system  supports  design  trade-offs. 

One  of  the  major  advantages  of  .-VDAS  in  design  and  analysis  of  systems  Is 
the  ease  with  which  the  system  model  can  be  created,  changed,  and  re-ana- 
lyxed  to  evaluate  system  trade-offs.  The  Inlbrmatlon  reported  from  an 
analysis  or  simulation  can  be  easily  checked  to  determine  the  effect  of 
change's  even  when  changes  are  made  during  a  simulation. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

.VD.\s  is  best  suited  for  multl-algoritltin.  multi-processor  system  tleslgn. 
(Generating  of  microcode  for  a  custom  chip  set.  mapping  Instructions  to  the 
most  optimum  areas  of  a  CPL'.  and  (letermiiilng  the  best  hartiware  conngiira- 
tUjii  for  a  specHlc  software  function  are  Just  a  few  of  the  applications  for 
whii'h  .AD.kS  has  been  used. 

22.  List  the  names,  addres.scs,  and  phone  numbers  of  live  (customers)  rntijor 
u.sers  of  your  system. 

Todd  (  arpentei' 

I  loneywell 

S.fifiO  'I'eriiiiology  Dl'lve 
Minneapolis.  MN  hr,  ips 


1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

The  system  allows  all  requirements,  design,  and  test  Information  to  be 
recorded  In  an  element-relatlonshlp-attrlbute  (ERA)  data  base.  Because  the 
Information  Is  In  a  data  base.  It  may  be  queried  In  various  ways  to  allow 
analysis  of  completeness  and  consistency  after  the  completion  of  a  methodolo¬ 
gy  phase.  The  DCDS  query  and  analysis  systems  provides  automated 
analyses  which  provide  the  user  a  listing  of  anomalies  In  his  specincatlon 
compared  to  what  should  have  been  dellned  In  the  data  base,  at  that  point 
In  the  development  process. 

The  primary  objective  of  DCDS  is  to  Incrementally  generate  and  verify 
requirements,  design,  and  test  Information  In  such  a  way  as  to  Increase 
software  development  productivity  and  to  attain  greater  software  reliability. 
These  two  benellts  are  expected  to  be  achieved  through  the  following 
ancillary  benefits: 

1.  Increased  Understanding  of  Distributed  Software  Development  —  by 
identifying  a  sequence  of  decisions  to  be  made  to  accomplish  the  develop¬ 
ment,  Identifying  the  crlteida  for  making  the  decisions,  providing  a  method 
for  representing  the  Intermediate  products,  and  Identifying  consistency  criteria, 
the  nature  of  the  design  process  Is  more  fully  exposed  and  can  be  better 
iinderstcx3d  by  software  developers.  Increased  understanding  of  the  softwai-c 
development  decisions  results  in  a  sei)aratIon  of  concerns  so  that  needed 
development  decisions  can  be  made  In  the  correct  order,  at  appropriate  times, 
and  with  less  iteration. 

2.  Early  Requirements  Empha.sis  —  system  and  software  engineering  In 
the  development  of  a  Data  Brocesslng  System  (DPS)  and  the  requirements  for 
the  software  that  Is  to  run  on  it  concentrates  on  developing  clear.  comi)lete. 
consistent  reqalrements  early  in  the  <leveloi)ment  phase.  This  apitroach  ha.s 
been  shown  to  have  an  Important  role  in  reducing  software  breakage,  since 
otherwise,  the  ■’real"  re(|ulreinents  are  often  uncovered  late  In  the  develop- 
iiKMit.  thus  recpilrlng  iteration  back  through  the  development  phases. 

3.  Automated  (  onsisl ency/(  ompleteness  Analysis  —  a  slguincaut 
objective  of  the  DCDS  methodology  and  hiiiguage  design  was  the  lilentlllcal Ion 
oT  coiislstency/completeiiess  criteria  which  could  be  \-eiined  using  antomated 
tools.  This  became  a  driving  factor  for  determining  what  should  be  lnclnde(l 
in  each  DCDS  data  base.  'I'hese  i-ritcria  are  dcrheil  from  the  semantic  rnle^ 


established  in  each  phase  (hiring  which  data  biuse  enti-ies  are  accomplished 
and  assure  that  human  errors  don't  creei)  into  the  data  base  undetected. 

1.  Discipline  -  a  primary  benellt  of  any  methodology  is  the  tbrmula- 
tlun  (5f  a  systematic  method  for  perl’ormlng  an  activity.  This  serves  to  focus 
the  developer  on  the  speclHc  decisions  to  be  made,  the  appropriate  order  in 
which  to  make  them,  and  provides  object  milestones  for  the  mettsnrement  of 
progress.  The  expected  result  is  both  lower  cost  and  lncrea.sed  reliability, 
because  everything  is  (.lone  when  It  is  supposed  to  be  done,  and  in  context 
with  other  DCDS  methodologies  with  which  it  may  Interface. 

■>.  Strong  Traceability  --  this  means  that  the  consistency  achieved  at 
the  softwai'e  requirements  level  is  lU'eserved  !>>  the  design,  that  any  motlinca- 
tlous  to  the  requirements  level  is  preserved  liy  the  design,  that  any  modlflca- 
rions  to  the  requii-ements  can  be  directly  traced  to  the  poidlons  of  the  design 
which  imidement  them  or  tests  that  validate  them.  Further,  any  portion  of 
Ill*'  ik"^ign  can  be  traced  l)ack  to  the  satisfaction  of  some  |•e(lnirements/deslgn 
decision.  In  addition,  tracealtllity  l)etween  key  elements  of  each  data  base 
arc  provided  so  that  change  of  any  such  elements  automatically  identiried 
upstrt'am  and  downstream  elements  that  may  retinire  changes.  If  the 
properties  of  the  requirements  are  preserve(.l  in  the  design  by  construction, 
errors  from  ixxir  traceability  should  be  absent  from  the  ccxie.  and  the 
I'cruibillry  of  the  end  product  is  thus  Increased.  Fui-thermore,  the  cost  of 
pci'foi-mlng  modincatlons  of  the  design  In  response  to  modincatlons  to  the 
rf'fiuli-ements  during  the  implementation  and  maintenance  phases  should  be 
i'('(|iiced  liy  the  estalilished  tracealtillty. 

2.  What  type  of  progress  metric  dtxts  the  system  produce?  Is  it  quantin- 
ahle  inotisure  of  coinplcteiioss? 

.\'o  automatic  men-ics  are  provided.  However,  knowledge  of  progress  status  is 
known  b(‘cause  of  knowledge  of  whhdi  of  the  :fi  methodology  phases  the  user 
ic  working  In.  Fach  pha.'^e  or  activity  has  a  recognizable  completion  criteria 
'f.  that  explicit  movement  from  |iha.se  to  i)ha."^e  can  be  reeognlzed. 

d.  Describe  how  your  system  supports  documentation,  program  rnanageinont 
and  control. 

■i.  Docitmeiii  at  ion:  ('cnlral  I’roject  Ma.'^ter  l^ala  Dase  and  the  (Tter\' 

'•a  I  Cl  bilil  >■  facilittil  ea  the  cfcalioil  of  .system  ( iocumeitt  at  loll  (textual  and 
j: l  a j ihica II \  )  fr()iii  Mic  spia-incatloii  and  design  iiil'ormatlon  in  I  he  data  Pase. 

b.  I ’n cj_!-ain  .\ laiiagcniciit  and  (  oiiirol;  The  program  manager  is 
-Ml'i  rod  b\  the  'va-rall  1  )is|  |■illl|l  cii  (  ompniiiej.  Design  sysiciii  (Dt'DSi 


--.V. 
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C()ncei)t  which  Is  designed  to  Increase  software  development  efllclency  and 
elTectlveness:  to  thoroiiglily  address  requirements  to  gain  the  cost  and 
schedule  heneHts  (d‘  getting  this  done  correctly,  understandably,  and  early: 
and  to  provide  life  cycle  traceability  from  requirements  to  test.  The 
ultimate  beneHt  to  the  program  manager  Is  reduction  In  risk. 

4.  Describe  how  your  system  supports  real  time  design. 

DC'DS  was  deslgaevl  from  the  beginning  to  provide  the  means  to  handle  real- 
time  design,  concurrency,  and  parallelism.  Real-time  design  Is  the  province  of 
the  Distributed  Design  Methodology  (DDM)  where  means  are  provided  to 
express  the  ileslgn  of  Individual  software  tasks  the  condition  under  which 
they  ai-e  aval!al)le  for  dispatch,  their  relative  priorities,  and  the  application 
operating  system  rules  for  determining  dispatch.  The  design  resident  In  the 
data  base  is  directly  usable  for  design  simulations  to  establish  that  real  time 
processing  can  be  accomplished.  DCDS  Incorporates  a  mechanism  for 
identir.ving  and  maiddng  performance  validation  paths  within  the  system 
model. 


Describe  how  your  system  supports  concurrency,  parallelism. 

( 'oucuiTciicy  and  parallelism  Is  handled  Initially  during  system  analysis  by  the 
s\-stpm  Retiuirements  Engineering  Methodology  (.SYSREM),  which  Is  an 
extension  of  the  techniques  described  In  Paragraph  10.2  ol'  MIL  STD-109 
(l.'SAF)  and  In  the  Department  of  .Ajuny  Field  Manvial  77078.  particularly 
the  a|)pHcatlon  of  Functional  Flow  Block  Diagrams  (FFBDs).  FFBDs  provide 
a  powerful  means  of  depicting  system  functional  flow',  but  leave  unanswered 
other  Important  system  Issues  needed  to  attain  adeeptate  system  dennition. 

'I'lie  more  important  ones  are  as  follows: 

-flow  tw  decomitose  atid  allocate  system  performance,  not  just  system 
futii-tions. 

-Ilow  to  accommodate  the  need  to  simultaneously  de;il  with  concurrency 
or  parallelism. 

-Ilow  lo  clearly  separate  the  standaial  (ex|)ected)  system  oijcration  from 
the  operational  consti'aints  caused  by  .subsystem  failures,  limitation  of  availal)le 
|•'■'-ol I rcc".  (e.g..  iiitei’ccptors).  ei.e..  in  order  to  attain  a  cleai'  pei’ceptlon  of 
^,'.'tcm  opcicitlon^  undci-  \-arions  conditions  without  cluttering  up  the  standard 
fmu-tio'iial  flows. 

-I  low  to  detcriniiic  w  hen  funcliontil  decomposition  Is  snfricient  1,\'  comp'Icie 
to  -.ii|,pori  proper  allocMiloii  to  i  he  com  |)onrMii  s  of  the  "-ysicm. 
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-How  to  derive  neeiled  (•(X)rdlnat.lon  runctlons  to  control  competing  needs 
of  various  functions  of  the  system. 

-How  to  derive  needed  Interface  functions  to  support  communication 
between  system  components. 

-How  to  dellne  tlie  conditions  for  transitioning  from  one  system  function 
to  another. 


shSREM  wa.'^  motivated  In  Its  design  to  extend  MIL  STD-199  and  FM  77078 
concepts  to  address  these  Issues  and  to  provide  a  formal  way  to  capture 
system  deniiitlou  In  a  data  btise  such  that  automated  consistency/completeness 
checks  can  be  api)ried. 

'I'lirough  s\sREM.  parallel  processing  possibilities  are  Identified  graphically 
duiiitg  the  functional  decomposition  process.  These  possibilities  can  be 
Implemented  tlii-ough  the  techniques  provided  In  the  Distributed  Design 
Met  h(tdol(,)g\'  (DDM). 

0.  Is  your  system  constrained  to  a  particular  Implementation  language  (Ada)? 

No.  The  DC  DS  Sitecificatlon  Language  supports  the  use  of  any  Implementa¬ 
tion  language.  Pascal  and  Ada  have  been  used  to  date. 

7.  D(x;s  you  system  prcxlucc  Ada  E'DL? 

It  sui'ports  the  use  of  PDL  during  the  design  phases  to  express  design.  An 
early  version  of  an  Ada  PDL  Processor  Is  available  In  the  DCDS  toolset. 

8.  Describe  how  your  system  supjKJrts  life  cycle  Intraphase  &  Intcrphasc 
communications. 

The  l)(  Ds  me!  hf)dologies  support  each  of  the  software  life  cycle  phases. 

Within  icicii  methodology  a  s|)eclfied  set  of  language  const luicts  are  used  to 
■■xpllcltly  caiitiire  re(|ulr('ments.  design,  or  test  Information  (de|)endlng  on 
wlileh  met  hodo|o'j;\'  is  involved).  A|)|)roprlate  iiortlons  of  the  data  i>:i.se 
product-  in  the  ilata  base  of  one  methodology  are  used  to  Initiate  the  data 
tci,-(  ;  y  .  low  list  rea  m  methodologies. 

liiOTi'liasi  (  '  ■mmutiication  Is  accomplished  as  foll<)\^s: 


-Ml  :  l|.  do-loyy  provides  siejis  and  lust  met  ions  which  guide  users  I  hrougli 


-Centralized  Project  DB  and  a  query  systems  makes  specllTcatlons 
available  to  everyone  working  a  particular  phase. 


-Consistency  checks  are  required  at  various  Junctures  within  phases: 
these  helps  ensure  consistency  among  the  project  team  members  and  reduce 
errors. 


Interphase  Communication  Is  accomplished  as  follows: 

-Information  and  specllJcatlons  from  each  i)hase  are  carried  forward  (via 
tlie  project  data  base). 

-Traceability  (from  phase  to  phase)  Is  supported  by  the  methodology, 
the  s[)ecincatlon  language,  and  the  support  environment  (software  tools). 


k  > 
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n.  Is  your  system  automated,  executable,  compilable? 

ncDS  supports  automatic  construction  of  executable  modules  from  the  system 
ai-cliltect\ire  described  In  the  data  base. 


The  underlying  software  providing  the  ttK)ls  to  stipport  DCDS  are  provided  In 
an  executable  version  for  use  on  a  V.-\X.  .A.lthough  currently  written  In 
Pascal,  ati  .\da  version  will  be  relettsed  In  October  of  1987  which  will 
support  transportability  to  other  systems  (l.e..  IBM  PC/AT). 

10.  Describe  the  graphics  support  for  your  system. 

DCDS  provides  graiililcal  Interfaces  fully  integrated  with  textual  representation 
of  functional  control  and  (lata  objects  for  both  system  level  requirements 
networks  (F_NETS)  and  software  requirements  networks  (R_NETS).  The 
graphical  ''ti-uctures  provides  a  method  Illustrating  concurrency,  seciuence  of 
operations,  and  decision  ixdnts  within  the  requirements  networks.  Enhanced 

capabilities  to  allow  for  dellnithtn  of  any  logical  set  of  structured  flows  via  a 
generic  structure  processor  are  under  dev(>loi)meut  with  completion  In 
September  i!)S7.  D(  Ds  grtiplilcs  are  designed  for  i)orta.bllUy  using  the 
I)l-;kX)()  [lackage  on  the  \  AX.  'I’liis  allows  (with  graphics  software  emulators) 
use  of  am  IBM  P( '  a.s  a  graphics  terminal.  .Xote  t  hat  all  data  Is  texluall,\’ 
maintained  In  the  Projet-t  Master  Data  Ba.se  such  that  full  functlonallt \'  of 
the  system  can  be  obialiiefl  without  gr:i|>hles— for  instane(>  with  :i  \'TK)() 

I  ermiiial. 
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11.  Describe  how  your  system  supports  concepts  of: 


-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-Imping 

-Evolutionary  development 

-Generics 

-Macros 

-Data  Hows 

-Control  nows 

'File  DCDS  concept  of  early  development  of  critical  algorithms  and  their 
evaluation  via  simulations  built  rapidly  from  the  data  representation  of  the 
■',\stein  architecture  supports  both  early  and  rapid  pi'ototyplng. 

'Fhe  metliodology  a.ssumes  an  archive  of  reusable  algorithms  Is  available  and 
dil'ects  the  module  designer  to  consider  and  select,  algorithms  to  be  used  In 
the  system. 

The  methodology  Is  geared  toward  decomposing  a  s.vstem  Into  specification 
[lackages  which  Identify  the  interfaces,  functions  to  be  performed,  and  the 
performance  requirements  associated  with  the  functions.  This  approach  allows 
the  design  of  indivhlual  functions  to  proceetl  with  minimal  knowledge  of  other 
parts  of  the  system. 

'Fhe  methodology  and  Its  supporting  specification  languages  supiiort  the 
development  of  data  structures  from  a  high-level  specification  in  retiulrements 
to  a  low-level  specincation  In  ileslgn.  Also  DCDS  directs  the  user  (software 
'uiglneerl  to  functionally  decomfiose  a  system  down  to  the  stlmiilus-rcsponst' 
le\cl.  'Fills  reciulres  the  softwmre  engineer  to  think  at  various  levels  of 
abst raciion  as  the  system  Is  being  deve|(>pe<l.  'Fhe  subnet  facilitates  thinking 
at  higher  levels  and  decom|)oslng  Into  lower  levels. 

1)(  i)s  I'f'diilres  t  hc'  use  of  (lata  object  tyiiing  to  defiiu'  data  structures  with 
I  he  '>■''1  em, 

l)(  l)s  -iqipf'i-m  the  de\a'|o|.i|icm  of  systems  in  1  hreads/pai  hs  w  lihdi  correspond 
!<•  i  rimary  ililerfacf's  o[-  messages/t  raiisaeliolis  to  he  proci'SSial  |iy  iIk'  S\sle|ll. 
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Tills  partltlonlns  of  the  system,  according  to  Its  laterl’aces,  supports  the 
DCDS  model(s)  and  speclOcatlons  may  be  changed  or  expanded  appropriately. 


A  special  version  of  DCDS  supports  the  derinltlon  of  Ada  generic  units. 

DCDS  contains  capabilities  to  generate  hierarchy/data  flow  structures  from 
the  requirements  and  design  speclllcatlons  stored  In  the  Project  .Master  Data 
Ehise.  .\lso.  a  static  data  flow  analyzer  tool  Is  provided. 

The  requirements  networks  (R_NET,  F_NETs)  provide  conditional  nodes  (l.e.. 
"or"  node)  used  to  specify  major  decision  points  with  respect  to  the  seciueuce 
of  the  specified  processing  steps. 

12.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  describe  It 
briefly. 

An  overall  paratllgm  for  DCDS  Is  resident  In  the  model  shown  In  the 
diagram  and  tables  following  the  questionnaire  response.  Some  of  the  method¬ 
ologies  alsc)  incorporate  their  own  paradigms  for  achieving  rcciulrements  and 
design. 


12.  Describe  the  external  tools  with  which  your  system  interfaces  (tool 
compatablllty). 

Dt'DS  has  an  Open  .\rchltecture  for  itsslmllatlng  externally-developed  tcxtls 
and  transferring  Information  to/from  external  tcx'tls.  The  common  Interface  is 
the  Project  .Master  Data  Ba.se  (ER.\  Model)  with  the  automated  tcxrls  used  to 
fiitei'.  extract,  and  fortnat  tlata  stored  In  the  data  base,  d'lie  current  DCDS 
Integrated  t(X)l-set  consists  of  the  following  major  functions: 

-'rranslatloii:  .-Vnalyzes  the  DCDS  speclllcation  language  input  statements 

and  subsequent  entries  Itito  the  data  ba.se  corres|X)nding  to  the  syntactic/se- 
inantic  defitiitlons.  'fills  function  provides  Initial  copslstetiey  checking  of  the 
iiqntts. 

-l•.’xtensi<)||:  .Allows  modincatlon  to  the  nucleus  of  elemenis.  relationships, 

and  attributes  of  Df  'Ds  languages  to  permit  exiiansion  of  language  const  laicts 
to  uicrt  special  iisei'/iiroject  needs. 

-(  omiileflon  and  (  onsist enc\’  .Analysis:  r*rovl(|es  static  flow  anal\sls  :ind 
the  eapabilities  of  a  generalized  extractor  system  for  idiccking  completeness 
and  e,  ,ji-'i^reiiey  against  semantics  imles  for  the  data  ba.se  contents. 
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-Database  Query  and  Retrieval;  i'rovldes  output  IVoiu  the  data  laise  via 
sets  denneil  by  user  query  commands  to  allow  manual  and  predetTned  analysis 
and  automated  documentation. 

-Graphics:  Allows  Interactive  development  or  modincatlon  of  structurt' 
graphics  and  produces  hardcopy  plots  of  the  structures  lor  documentation. 

-Simulation:  Provides  the  means  to  create,  execute,  and  analyze 
simulation  of  the  runctlonal  operation  of  a  system  under  development  In 
terms  of  the  iTciulrements/deslgn  established  In  the  data  base. 

H.  Describe  how  your  .system  supports  hierarchical  decomposition  and  flow 
<llrcctlon  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  object-oriented  design. 

D(  Ds  pi-o\ldcs  a  logical  topdown  decomposition  of  the  problem.  It  uses 
hierarchical  deconiitosUion  only  at  the  systems  analysis  level  to  establish 
System  or  Segment  Sf>ecincations.  L'nUiue  rules  are  provided  for  system 
decoiiiposit loll  to  a.ssure  that  a  functions  decomposition  deHnes  its  subordinate 
function  withlti  a  contiol  flow  context  that  allows  parallel  reiu-eseiitalloii  of 
system  actions. 


DGDs  uses  an  augmented  fitnctlonal  decomi>osltlon  approach  t(j  de\’elop 
requlretnents  and  designs.  It  Is  not  Just  a  simple,  top-down  method  ol' 
itecomiiositlon.  The  setiuence  of  functions,  potential  for  concurrency,  and 
control  flow  are  combined  with  functional  decomposition  to  produce  retiulre- 
inents  and  design  models,  .-\ddltlonally.  DC'DS  encourages  some  bottomup 
de\-elopmont  during  the  early  stages  of  the  system  development  process  whim 
critical  assumptions  and  concepts  must  be  simulated,  tested,  and  proven. 

'rills  api>roach  provides  a  clear,  concise  understanding  of  reriuired  software 
actions  greatly  reilucing  the  ambiguities  that  abound  as  the  traditional 
I'unctUjiial  decomposition  apiiroaches  offered  by  other  systetns. 

Design  i-reat l\ii y  is  enhanced  by  tudileving  a  clear  understanding  of  system 
and  '-oi'twai-e  laaiuiiamieiii s  e:irl>'.  Ipv  providing  a  rotid  map  (not  a  constraining 
cocls-Pook  )  of  a  siiggesteil  set|iie|ice  of  d('Ve|o))er  actlotis  itl  the  ttiet  hodologies. 
itid  by  [ii-o\li  ling  utideriN’itig  tools  to  a.ssist  the  user  Itt  e\'ery  phase  of  the 
'\sieni  dellnition  and  software  developtneni . 

Aspect-  (,f  object  orieittetl  design  art’  captured  itt  sottte  abstractions  and 
apP'f' ,ac|ies  u-ed  III  lU  1)^.  ()bjecls  of  interest  are  i  nl  !'( )d  I  ice.  1  in  the  S(  )|'|  W  :i  I'C 
I' ,  |iiirciiii  at  .  phase  where  the  re(|nired  <l.aia  I  ransformat  ions  are  precisiiy 
dcfimq  .,||  till'  pro'ce'.siicg  l<.glc  iliagrams  (lescribed  abo\'e. 
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15.  Is  your  system  supported  by  rormal  synt;ix  &  semantics?  Describe 
brletly. 


i 


II 


'The  langua;4es  used  to  define  tbc  requirements,  design,  and  testing  all  have  a 
rormal  syntax.  In  addition,  certain  semantic  rules  are  expected  to  be 
followed  by  the  users.  For  example.  If  the  user  deHnes  an  Input  message,  he 
is  expected  to  assure  that  he  also  deHnes  Its  data  contents.  These  semantic 
rules  ai'e  the  basis  for  the  predefined  consistency  checks  available  for  use  in 
rile  various  methodology  phases. 

It).  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

Thi>  is'  a  Ciovernment  owned  system.  Although  there  is  no  cost  to  actiulre 
it.  Ciovt'i'iiment  approval  must  Hrst  be  attained.  In  addition,  it  currently  is 
not  being  relea.sed  to  foreign  users.  .Vlso.  training  material  is  currently  iindei' 
■  le\'eloriiuent . 

17.  Indicate  the  iKxstablllty  (metisure  of  degree  of  portability)  of  your 
.system. 

The  imilerlylng  DC'Ds  software  is  currently  hosted  on  a  \'.\X  using  the  \'.\IS 
'■pertdiiig  system.  .Additionally,  the  .Ada  version  of  DCD8  is  cuia-ently  being 
re-hosted  onto  a.u  lFh\!  FC/.AT. 

18.  Describe  how  your  system  supports  interdisciplinary  abstractions/represen¬ 
tations  (i.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

(..iuestloiis  1.8  and  10  are  slmihir  in 'nature  and  sco|>e.  I'herefore.  only  one 
answer  was  < le\a'|oi)ed.  d'he  .answers  for  iioth  questions  is  |)resented  under 
(.piestion  10. 

10.  I  low  cotiiplete  is  the  ttiethodology  -  do  its  [)rlnclples  embody 

-A  d(!v<tlopment  methodology  only 
-A  design  methodology  only 
-A  progratnndtig  ttiethodology  only 
-A  project  control  methodology 
-A  mtimigement  methodology 
-All  of  the  abov(! 

I)(  I)''  i-  an  I'emi'l)  '■(anpr'dieu'-i',  e  '-ci  of  n\c  met  hocloh.'gles.  It  iina.rpo- 
rali'  'J  I  pha.-e^  and  a  p  provi  n  i  a  I  e|y  1  to  -lep--.  'flic  fl\e  met  hod(  ho'j,ies  within 
I  )t  I  n-.  : 
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-System  RequlrenuMU.s  Engliieeriiisi  Mcthodolosiy  (S\'SREM)  I'of  denning 
and  specHylng  s\'sieni  rectulrenients.  wUli  ;ui  empliasls  on  Ihe  data  processing 
■^uli>\'st(Mn. 

-Software  Recinlreinents  Engineering  Metliodology  (SREM)  for  detlnlng 
-yvt('m  software  requirements,  with  an  emphasis  on  stimulus-response  behavior. 

-Iblst  rlbitted  Design  Methodology  (DDM)  for  developing  a  top-level 
architect ural  design  for  the  system  software.  Including  distributed  design, 
pisiccss  dt'slgu.  and  ta.sk  design. 

-Module  l)e\-elopment  Methodology  (.MDM)  for  Investigating  and  selecting 
algo.i'ii  litiis.  denning  detailed  design,  and  producing  units  of  tested  code. 

-'re''r  Suiifiort  Methodology  ('rSM)  for  definltig  test  plans  and  procedures 
against  re(|ulr(uuents.  producing  an  Integrateil  tested  system,  and  recording 
test  results. 

d'lif  dlag.ram  following  the  questlonmtlre  response  Illustrates  how  the  DCDS 
\ let  li(;do|ogies  synergist Ically  work  together  to  support  the  system  develoi)ment 
life  I'^cie  I'rom  system  re(|uiretnents  through  Integration  testing.  In  addition 
to  si!|,|,(a-ting  the  fradltiotial  .system  life  cycle  pha-ses.  DCDS  supports  pro.lect 
ur.magiuucnt  activities.  The  DCDs  pro.lect  master  data  base  is  a  repository 
for  '^toi'ing  system  siiecinctitloti.  decisions.  a.ssumi)tlons.  etc.,  which  maj’  be 
interrogated  or  siimtmarlzefl  Iti  reports  for  |iro.lect  management.  The  DCDS 
^’.otiuii  spfcirications  may  he  reviewed  by  management  for  accuracy,  complete¬ 
ness  and  consistency  using  tlie  D( 'DS  (|ucry  (•a|):tl)lllty. 

l)t  l)S  al'C.  --up[)ot'ts  the  management  of  software  de\(>|oj/meni.  Spf'cincally. 
the  .\utomatc(l  t  ult  Development  Eolder  con.soHdat es  the  laaiulrements.  design, 
code',  te'i  plan,  'cliediile.  etc.,  into  oiH'  file  wilich  tiiti.N'  be  Updated  and 
quei'ieii  Py  |ii-o]f.ci  management. 

L’O.  Derscaitje  how  your  system  supports  a  team  development  approaeti. 
(Niitid)er  of  sttitions/users). 

I )(  D^  In.'  e.' ,i  1 1  eiii  plat  e(  I  the  '  ii'ol  )a  bl  11 1  y  i  h.al  most  systems  ari-  l|(•^■eloped  by 
['■aii!-  I'  \:uioU'  dlscipHlie'  :i|id  the  llU-t  bo' lologles  are  de'lgneil  with  tint  ill 


s\'s[^EM;  SysH'in  Engineers 
sfJEM:  Software  Requirements  Engineers 

DDM:  Distributed  Process  Designers  (l.e.,  design  system 

software  architecture) 

MDM:  Detailed  Designers.  Implementors 

TDM:  Integration  Testers 

Eaidi  has  been  given  his  own  language  set  to  detlne  the  results  of  his  efforts 

ill  ilatn  bases.  These  may  be  distributed  for  use  by  various  teamed  conti'ac- 
t('rs  ()[■  for  seiiarate  detiartments  within  the  same  company.  With  appropii- 
:iit'  '■oiiriani’atlon  iiiaiKigtunent .  multiple  users  may  work  with  a  single  data 
bas.a 

21.  IDt'scribc  how  your  system  supports  design  trade-olTs. 

Data  base'-  iH'ovlde  the  iiiforinatlon  to  support  .simulations  at  different  levels 
>■!'  di'tall.  The  logic  stiaictures  (specify  functions,  control/data  flow.  Interfaces 
and  performance  objectives)  that  are  denned  In  SYSREM  (iimler  development) 
and  in  .slJl-hM  (exists)  pn-ovldes  the  simulation  framew-ork.  'I'hus.  If  the 
rc''nli''  :ire  not  a.--  expected,  there  Is  no  Issue  txs  to  whether  the  reciulremenis 
' -r  the  "imnlatloti  lldellty  Is  the  jiroblem.  When  the  reqttlrements.  represent¬ 
'd  by  the  logic  diagrams,  are  modllled  to  Improve  the  system's  iterformanee. 
Mie  '■Imnhitor  is  automatically  changed  In  accordance  with  the  chtmges  to 
'he  logic  dhigram  structures.  Other  generic  simulation  output  exists  for 
de^hiii  trade-offs  that  allow  the  user  to  tailor  a  simulation  to  the  level  of 
IclelHj-  :ipprf)pri:ire  for  his  ileslgn.  :md  then  to  tdlow  the  .simulation  to  i-nn 
u-'itig  the  contents  of  ins  design  data  base  as  a  direct  Initiit  to  the  sitnnla- 
I  loti. 

22.  ludlctiU;  the  rtuigc  of  problems  to  which  the  system  can  be  applied. 

D(  I W'  i-  de-iyii'-d  f'.'f  hirtpe.  dlst rlbuleil.  real  ilimn  embedded  systems,  such  :is 
Miai  'll  I '•m  pla  I ''d  for  s|)p  1  lowever.  it  enn  ;vlso  snpporl  stnaller  --ystem. 

Ill’ '[|o|ii  iii'-  -y-iciii'.  n(.’ii-real  time  systems,  or  non-etnbedded  comiiuter  sysimiis. 
Th'  ii-e|-  dmi‘1.'.'  'kip'  the  p(.rtions  ol'  the  met  hodoloyy  'hat  do  not  appl.\  lo 

hi'  'll  a  'lie'll  i(  ai. 


23.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  major 
users  of  your  system. 


Mack  Alford 

GE 

f\0.  Box  85.55 
Building  7.  Floom  7236 
Philadelphia.  PA  19101 
(215)  3.5A2035 

Barry  Bcxdim 
TF-(W 

Building  02  (Room  1310) 

One  Space  Park 
Redondo  Beach.  C.\  90278 

(213)  .53-5-218-1 

David  [h\ liner 
GRG 

FLO.  Box  6770 

Santa  Barbara.  CA  931606770 
(S05)  96-1-772-1 

[,arry  Marker 
TRW 

213  Wynn  FOrlve 
lluntsvllle.  AL  35805 
1205)  X37-2  1()0 

Cllf  Barkley 
'I’RW 

213  Wynn  Drive 
1  luiifs\ll|i'.  Ai.  35Ni).5 
I205)  s:-;7-2  IO() 

Aiiec  Bl'fAVIl 

Na  il'll'-  l■;!■^e;u■(•h  (  '  ii'poratlon 
tnio  Mciii' 'I’ial  Parkway 
I  luill  -\  llli'.  \l 

I  -JO.', ,  x:;:o  i  i  |i  i 
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Wayne  Smith 
GRC 

307  Wynn  Drive 
Huntsville.  .\L  .35805 

(205)  837-7900 

Carolyne  Paslnl 
TRW 

Building  119  (Rcx)m  ■182-1) 
One  Space  Park 
Redondo  Beach.  CA  90278 
(213)  217-6581 
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Table  1-1.  The  Phases  of  the  System  Requirements  Engineering 
Methodology  (SYSREM) 


•  Phase  1;  Define  System  -  Supports  transformat''on  of  the  need  into  a  formal 
problem  statement  of  the  semi-closed  system,  which  includes  the  system  and 
its  environment.  The  top-level  inputs  and  outputs  and  the  performance 
indices  of  the  system  are  defined. 

I 

t  Phase  2:  Identify  Subsystem  Configurations  -  Supports  definition  of  subsys¬ 
tem  configurations  which  describe  potential  classes  of  solutions  to  the 
system  problem.  This  allows  definition  of  the  classes  of  inputs  and 
outputs  of  the  system  regarded  as  a  black  box  containing  the  defined  sub¬ 
systems. 

•  Phase  3:  Decompose  System  Logic  -  Supports  transformation  of  the  semi- 


closed  system  requirements  into  the  open  system's  requirements  by  decompo¬ 
sition  to  the  level  where  the  system's  perception  of  the  items  in  the 
environment  occurs.  This  allows  identification  of  the  sequences  of  inputs 
and  outputs  between  the  system  proper  and  its  environment. 

•  Phase  4:  Decompose  and  Allocate  to  Subsystems  -  Supports  continued  decompo- 
sition  of  the  functional  requirements  until  they  can  be  uniquely  allocated 
to  the  subsystems  defined  in  Phase  2,  and  allows  identification  of  the 
subsystem  interfaces. 

•  Phase  5;  Determine  Subsystem  Feasibility  and  Cost  -  Based  on  the  allocated 
requiremenTs',  supports  estimation  ot  resource  utilization,  cost,  and 
schedule  for  each  subsystem;  identification  of  potential  failure  modes;  and 
definition  of  subsystem  level  critical  issues. 

•  Phase  6:  Solve  Subsystem  Critical  Issues  -  Supports  evaluation  of  analysis 
results  of  subsystems  to  identify  system-level  approaches  to  solve  critical 
issues  to  achieve  required  system  performance. 

e  Phase  7:  Develop  Exception  Layer  Decompositions  -  Supports  development,  of 
the  additional  layers  ot  requirements  needed  to  deal  w’th  exceptions  caused 
by  system  failures  and  resource  limitations.  These  new  functions  are  then 
decomposed  and  allocated,  as  described  in  the  preceding  phases. 

e  Phase  8:  Plan  System  Integration  and  Test  -  Supports  establishment  of  the 
plans,  schedule  and  costs  for  development,  integration,  and  testing  of  the 
developed  subsystems  to  yield  the  desired  system. 

•  Phase  9:  Optimize  Over  Designs  -  Supports  analysis  of  alternative  system 
designs  (subsystem  contigurations)  for  selection  of  the  final  system. 

•  Phase  10:  Produce  System/Subsystem  Specifications  -  Supports  production  of 
the  System  Segment  Specifications  in  accordance  with  customer  formats  in 
preparation  for  the  System  Requirements  Review  or  the  System  Design  Review. 
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Table  1-2.  The  Phases  of  the  Software  Requirements  Engineering 
Methodology  (SREM) 


I*  Phase  1:  Define  Elements  and  Bu'ild  Data  Base  -  Supports  initial  definition 
[  in  an  RSL  data  base  of  the  DPS  requirements  by  identifying  the  interfaces, 

message  flow  and  contents,  global  information,  and  the  processing  flow  to 
respond  to  input  messages. 

•  Phase  2:  Evaluate  Kernal  -  Supports  consistency/completeness  checks  of  the 
data  base  produced  in  Phase  1  to  provide  the  software  engineer  a  list  of 
anomalies  for  his  correction. 

•  Phase  3:  Complete  Functional  Definition  -  Supports  detailed  definition  of 
data  an3  add! tional  consi stency/compl eteness  checks  to  assure  correct 
membership  of  data  within  messages  and  repetitive  sets.  Also  supports 
evaluation  that  all  data  is  both  used  and  produced  within  the  defined 
processing  logic  and  analyzes  the  logic  of  the  defined  data  flow.  Provides 
information  of  anomalies  for  correction. 

•  Phase  4:  Complete  Management  and  Control  Information  -  Supports  examination 
of  the  completeness  of  traceability  within  the  data  base  and  the  status  of 
open  issues  for  solution  and  provides  identification  of  needed  corrections. 

•  Phase  5:  Accomplish  Dynamic  Functional  Validation  -  Supports  building  and 
executing  a  functional  simulation  to  accomplish  a  dynamic  evaluation  of  the 
OPS  requirements  directly  from  the  data  base.  This  provides  a  means  to 
examine  the  DPS  system  operation  within  an  environment  defined  in  a  user- 
built  simulation  driver. 

•  Phase  6:  Develop  Performance  Requirements  -  Supports  identification  of 
paths  on  the  processing  flow  diagrams  to  which  performance  requirements  can 
be  allocated  and  the  points  on  these  paths  where  data  can  be  recorded  for 
use  in  evaluating  attainment  of  the  performance  requirements.  Also  sup¬ 
ports  definition  of  how  the  system  uses  the  recorded  data  to  determine  a 
pass/fail  criteria  for  each  performance  requirement. 

•  Phase  1\  Accomplish  Analytic  Feasibility  Demonstrations  -  Supports  evalua- 
tion  of  different  algorithmic  approaches  within  the  context  of  the  process¬ 
ing  flows  in  the  data  base  and  to  evaluate  allocated  performance  require¬ 
ments  for  pass  or  fail  within  the  environment  modeled  by  the  simulation 
driver.  Assists  in  identification  of  infeasible  and  non-testable  require¬ 
ments  . 


•  Phase  8:  Produce  Software  Specification  -  Supports  production  of  the  Soft¬ 
ware  Requirements  Speci  fication  Tri  Tccordance  with  customer  formats  in 
preparation  for  the  Software  Specification  Review. 
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Table  1-3.  The  Phases  of  the  Distributed  Design  Methodology  (DOM) 


•  Phase  1:  Accompl'ish  Geographical  Node  Des'ign  -  The  first  of  four  overlap- 
ping  levels  of  design  wnlch  defines  the  geographically  separate  network  of 
nodes.  Results  in  requirements  and  constraints  for  local  node  design. 

e  Phase  2:  Accomplish  Local  Node  Design  -  The  second  of  four  overlapping 
levels  of  design  wh^cn  defines  the  design  of  local  nodes  of  groups  of  com¬ 
puters  or  computer  systems  connected  by  a  local  communication  system  and 
interfacing  with  the  communication  network  connecting  the  geographical 
nodes.  Results  in  requirements  and  constraints  for  computer- system  design. 

•  Phase  3:  Accomplish  Computer- System  Design  -  The  third  of  four  overlapping 
levels  of  design  wh''ch  defines  the  internal  design  of  local  computer  sys¬ 
tems  based  on  common  architectural  considerations.  Supports  identification 
of  the  details  of  the  interconnection  networks  and  protocols  between  the 
local  computer  systems.  Also  supports  decisions  as  to  allocation  of 
requirements  between  various  software  levels  and  the  hardware.  Results  in 
requirements  and  constraints  for  local  process  design. 

•  Phase  4:  Accomplish  Local  Pi^ocess  Design  -  The  last  of  four  overlapping 
levels  of  software  design  which  defines  the  details  of  the  processes  to  be 
allocated  to  the  various  computer  systems.  Includes  definition  of  applica¬ 
tion  tasks  and  their  budgets  scheduling/dispatching  criteria,  priority 
structures,  intertask  communication,  error  handling,  overload  control,  and 
process  control.  Also  supports  definition  of  global  data  management, 
access  protocols,  and  interface  refinement.  Results  in  the  requirements 
and  constraints  for  task  design. 

•  Phase  5:  Accomplish  Task  Design  -  Supports  application  of  process  and  task 
design  rules  to  identify  the  task  control  routine  and  its  layers  of  sup¬ 
porting  application  routines.  This  includes  opening  Automated  Unit  Develop¬ 
ment  Folders  (AUDFs)  which  are  used  to  organize,  in  a  single  place,  all 
aspects  of  the  development  of  each  unit  of  code  from  requirements  to  unit 
test  for  the  tasks  to  be  designed.  Results  in  the  requirements  and  con¬ 
straints  for  the  detailed  design  implemented  in  the  Module  Development 
Methodology  (MDM)  of  DCDS. 

•  Phase  6;  Produce  Design  Specification  -  Supports  production  of  the  Software 
Top  Level  Design  Document  ""n  accordance  with  customer  formats. 


169 


86  03  7827 


Table  1-4.  The  Phases  of  the  Module  Development  Methodology  (MDM) 


•  Phase  1:  Idenfify  and  Analyze  Potent’' al  Algorithms  -  Supports  ident'if''ca- 
tion  of  algorithm  needs  and  their  interfaces,  evaluation  of  existing  or  new 
algorithmic  approaches,  and  determination  of  timing  and  sizing  estimates  of 
candidates.  Candidates  are  offered  for  consideration  by  the  process  de¬ 
signer. 

•  Phase  2:  Define  Reusable  Modules  -  Based  on  the  evaluations  of  Phase  1  and 
Process  designer  feedback,  supports  selection  of  a  candidate  set  of  algo¬ 
rithms  for  development  and  supports  reusable  module  design  of  selected 
critical  algorithms. 

•  Phase  3:  Accomplish  Design  of  Routines  -  Supports  preliminary  achievable 
design  in  PDL  for  routines  ?o  accomplish  algorithms  that  are  not  using 
existing  reusable  modules.  These  preliminary  designs,  their  requirements, 
and  their  interfaces  are  used  to  initialize  Automated  Unit  Development 
Folder  (AUDF).  After  PDR,  supports  development  of  detailed  designs. 

•  Phase  D^^^lop  Unit  Test  Plan  -  Supports  development  of  the  unit  test 
plan  in  the  AUDr .  Also  supports  definition  of  test  procedures,  test  cases, 
pass/fail  criteria,  test  drivers,  and  data  loggers  for  unit  tests,  where 
appropriate. 

•  Phase  5:  Code  and  Unit  Test  -  Supports  development  of  the  in  line  code  to 

repl ace  tHi  PDL  comments  between  the  PDL  control  flow  statements  of 
Routines  entered  into  the  AUDF.  Supports  prevention  of  control  flow 

changes  within  Routines  without  Task  Designer  approval.  Also  supports 
recording  of  unit  test  results  in  the  AUDF. 


86-03  7828 


Table  1-5.  The  Phases  of  the  Test  Support  Methodology  (TSM) 


•  Phase  1:  Prepare  Im'fial  Test  Approach  -  Supports  <nif'at''on  of  the  TSL 
data  base  from  the  SSL,  RSL,  and  DDL  data  base  to  capture  the  •fn format'' on 
necessary  to  produce  the  requ''rements/ver'ificat''on  matri’x,  and  the  test/ 
requ''rements  matr-ix. 

•  Phase  2:  Develop  Test  Plans  and  Environment  -  Supports  def''n''t^on  of  the 
major  segmentat'ion  of  the  test  program  Tfito  builds,  and  schedules  the'ir 
t^^me  sequence.  Test  names  and  test  a'ids  are  ■identif'ied  and  scheduled,  and 
a  prel  ■'m''nary  test  plan  ■is  produced. 

•  Phase  3:  Develop  Test  Procedures  -  Supports  detail “ing  the  test  procedures 
and  test  cases  with  inputs,  expected  outputs,  and  pass/fa'il  criter'ia.  All 
necessary  drivers,  harnesses,  simulators,  and  stubs  are  developed  and 
tested.  Uses  'Automated  Test  Development  Folder  (ATDF)  and  the  TSL  Data 
Base  to  organize  and  plan  testing  for  each  build. 

•  Phase  4:  Perform  Integration  Tests  -  Supports  the  integration  testing  and 
producfion  of  periodic  status  reports  and  the  final  integration  test 
report.  Uses  the  ATDF  and  TSL  Data  Base  to  record  test  results.  The  indi¬ 
vidual  builds  transition  into  this  phase  separately,  according  to  their  co 

schedule.  9* 

o 

u 

•  Phase  5:  Perform  Acceptance  Tests  -  Supports  the  test  program  for  formal  » 
qualification  testing.  Acceptance  test  plans,  test  procedures,  and  test  Jo 
reports  are  produced  the  same  way  as  for  integration  testing. 
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1.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

The  use  of  PSL/PSA  for  retiulremeiits  analysis  and  system  specification  assists 
In  tlie  early  detection  of  large  scale  design  flaws.  This  is  the  purpose  for 
which  PSL/Psa  was  designed,  and  has  proven  valuable  In  years  of  Industrial 
use.  PSL/PSA  does  this  by  Identifying  overlapping,  redundant  or  Inconsistent 
Intbrniailon  in  the  design  description.  This  Is  accomplished  by  examining  a 
graph  of  the  structure  of  the  design. 

Once  the  system  ha*^  proceeded  to  lower  level  design  and  the  system  h-^ts 
been  transhited  to  B.vron.  errors  and  inconsistencies  continue  to  be  easy  to 
find,  because  It  is  ea.sy  to  trace  code  back  to  the  requirements  that  a 
•specific  piece  of  covle  is  Intenrled  to  satisfy.  This  also  makes  It  possible  to 
determine  whether  all  requirements  have  been  addressed,  which  a.sslsts  In 
determining  whether  ciosine  has  been  satisfied. 

2.  What  type  of  progress  metric  dtxts  the  system  produce?  Is  It  quantifi¬ 
able  measure  of  completeness? 

After  the  software  s\'stem  being  createtl  reaches  the  point  where  the  Byron 
tcxds  can  be  apiilled.  each  unit  In  the  system  Is  marked  to  Indicate  what 
phase  of  the  life  cycle  It  has  reache<l.  As  the  eode  evolves.  It  gratlually 
intsses  through  eacdi  (M'  the  iihasi's:  speclfieatlon.  design,  coding  and  test.  At 
any  point  It  is  possible  to  (|uery  the  system  as  to  what  phase  any  glveti  unit 
has  reached. 

In  addition.  r(X)ls  tcj  [jerforiu  such  metric  analysis  as  the  Halstead  metric 
have  Ijcen  written  l)a.''ed  on  the  Information  available  In  the  Byron  (lata  base, 
'rtiiis.  the  i)(;t('ntlal  i-xists  for  many  such  t(X)ls.  although  they  are  not  part  of 
the  '•iiri-ciii  set  of  tools  supplied  with  Byron. 

;l  Describe  how  yoiir  .system  supports  documcntatlou,  program  management 
:ind  (tontrol. 

The  Byi'oii  -y-ieiii  iiieliides  a  doeiimeiit  generator  and  formatter  whose- 
yuipo'-e  lo  siinpllf\'  the  proeess  of  creating  documents  which  desciibe  the 
-\'le[ii.  d'lic  user  ilescribcs  the  1 1(  )c  il  lUeil  t  which  Is  to  be  pl-oduced  ill  a  high 
i''."!  la irj,u:rj.'  ealhvi  iPlfjc.  iuforiuiiig  the  processor  what  iiifoniiatlou  to 
'  \ii  aei  rioiii  I  he  and  how  !(;  foiaiiai  It.  The  user  (airreiiily  ri'cei\rs 

IV.'  d'oiiauiii  ! ‘•luplso-'  whh  the  Byroii  sys|,.ur.  a  call!  n-e  geuerator.  a  user 
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manual  generator,  a  data  dU-tloiiary  generatv)r.  a  dependency  table  generator, 
and  a  -183  style  c5  generator.  In  addition,  work  Is  In  progres.s  on  teniitlates 
generate  many  of  the  2167  style  doouinent.s.  The  high  level  language 
Biloc  makes  It  easy  to  create  new  docnnients.  and  It  Is  easy  to  keep 
documents  current  because  they  are  gene'-ated  directly  from  the  code  and  the 
comments.  Thus  control  of  document  versions  temls  to  become  mostly  a 
matter  of  controlling  versions  of  system  code. 


1.  Describe  how  your  system  supports  real  time  design. 


Keal  time  design  Is  supt)orted  by  the  PSL/PSA  tools  through  the  ability  to 
describe  timing  and  state  transitions  within  the  system.  It  Is  possible  to 
■inalyze  the  l^ehavlor  of  the  s.vstem  ba.sed  on  the  Information  described. 
When  the  design  passes  to  the  Byron  system,  the  user  may  apply  all  the 
'oual  .-Vda  constructs  associated  with  real  time  applications,  and  may  tailoi- 
the  use  of  the  Byron  PDL  to  support  the  use  of  these  constructs. 


.'>.  Describe  how  your  system  supports  concurrency,  parallelism. 


riie  ps|./PS.-\  tools  permit  the  user  to  ea.sily  describe  parallel  prctcesses. 
r'UK lezvoiis.  and  the  like,  and  to  analyze  systems  described  In  this  manner. 
Wli.-n  the  design  ittusses  to  the  Byron  system,  the  user  may  aitply  till  the 
U'Ual  \ih:i  constructs  associated  with  real  time  ap[)llcatlons,  and  may  tailor 
dll'  use  of  the  El.vrtm  PDI.  to  support  the  use  of  the.se  constructs. 


t).  Is  yotir  system  constrained  to  a  particular  Implementation  language  (Ada)? 


dde  P^l./l’sA  -ystcin  is  wholly  language  Independent,  Byron  s.vstem 

o  111-.-  0(1  :iii  Ada  lia^e,;  and  Is  therefore  slanted  toward  .-Vda.  Ilowew'r. 

I  Ic’  ''C'ti  iii  ha.'-  bci'U  11^1‘d  to  (■ri’aic  hoth  I-du'tran  anil  C'\1S2  code  lu  the 
i'a.'i.  and  otlcr  laimuavi-s  would  i>ri'scnl  no  dlfferiuit  [U’ohlems.  One  cusiom- 
dors  not  >wcii  own  :m  Ada  i-omiiilcr.  ddie  Byron  system  Is  most  ea''il,\ 
m  l  naturally  inr(i,  howcvi-r.  wlini  the  im|)lement atlon  language  Is  Ada. 


7.  I)(X'S  yoii  system  [troduce  .'\d:i  PDI/? 


'ir!ii  1'  ab|r  to  [.ro'diicr  Ada  PDI,  at  stages.  I'drst.  at  t  hr 

"  l<'t\<,"rii  P^l./Ps,\  :iiid  B\’rr)n  a.---  deseri hn I  ahov’e.  Secondly.  Ad:i 

'  l.tuinlug  l-'tl)  roiiiiiiriils  (iml  ''krlrl:il  code  (;i  PDh  drscrl  pt  loll  )  r;i| 
I'lir.i  frriii  •inr-itio|ir  :ilr'-ad\  aiiah'/md  Into  the  B\'rom 


8.  Describe  how  your  system  supports  life  cycle  Intraphase  &  Interphase 
communications. 


The  ease  with  which  one  can  communicate  between  phases  depends  on  which 
pluise  one  Is  In.  It  Is  eitsy  to  communicate  between  requirements  analysis 
and  system  specllTcatlon,  and  also  between  the  phtises  following  design.  This 
Is  because  the  form  of  the  design  during  requirements  analysis  and  system 
specincatlon  Is  the  PSL/PSA  form,  while  the  form  for  the  rest  of  the  life 
cycle  is  that  of  the  Byron  PDL.  While  the  Information  Is  In  one  form  or 
the  other,  the  phase  delineations  are  fairly  l(X)se.  Basically,  whatever  form  Is 
at'pUcable  Is  Itelng  expanded  on  In  whatever  manner  Is  appropi'iate  for  tlie 
phase  one  Is  In.  The  Information  created  during  the  previous  phases  is 
present  in  the  form  that  Is  being  expanded  upon. 

The  communication  betw'een  the  system  speclHcatlon  phase  and  the  design 
phase  Is  more  rigorously  controlled.  When  the  P.SL/PS.\  code  is  deemed 
■'omplete.  a  tatl  Is  used  to  create  Ada/Byron  code  skeletons  based  on  the 
PSI./PSA  code.  Incorporating  the  Information  available  In  the  P8L/PSA  code 
In  the  Ada/Byron  code. 

9.  Is  your  system  automated,  executable,  compilable? 

'I'lie  sN'stem  is  comprised  of  a  series  of  executable  tools  which  assist  In  the 
aiialv'^is  of  statements  of  system  design.  These  statements  take  two  forms, 
input  rode  to  the  PS[,/PS.-\  system  and  Inimt  code  to  the  Byron  s\'stem. 

'I’he  Byron  code  Is  in  the  form  of  .\da  code  with  structured  comments  and 
^o  is  compilable.  There  Is  a  t(X)l  which  automates  the  translation  from 
P''l./t’''A  rode  to  Byron  code.  In  addition,  facilities  are  provideil  to  permit 
I  hr  user  ro  tailor  existing  tails  to  create  new  Kxds  reporting  on  the  Infortna- 
ilon  Ill  the  ilescrlptlons  of  the  system. 

10.  Dc'scrlbe  the  graphics  .support  for  your  system. 


riir  '.'.--I.  Ill  run''  prlmaril\'  on  mainframes:  howiwer.  a  Pt'-ha.secl  I'ront-end  is 
■c.  lihiblr  with  BSI./PSA  which  Is  (•om|)leie  st!'ueture<|  anal\''l‘'  workrt al Ion 
'  M. billing  :iii:il.\  si.s.  gi';i|ililcs.  and  document  at  Ion  facilities  in  a  flexible  working 
•  a'.  ii  ',iiniri;i .  'I'he  B\  roii  i(X)l  Itself  lia.s  no  graidileal  interfai-e.  |i  1-.  possible 
I;  ,  f,  ,|-  B\  reii  users  to  write  l)oth  gra|)hl<'al  and  Interact i\-e  i-eporis 


tram  l,lbrar\’  Access  Package  (a  ''Cl  nf  database  i|nctv\ 


11.  Describe  how  your  system  supports  concepts  of: 

-Early  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-Packaging  concept 

-Abstraction 

-'I'yplng 

-Evolutionary  development 

-Generics 

-Macros 

-Data  flows 

-C'ontrol  flows 

U  is  },K)ssii)|(.  to  create  programs  with  the  Byron  Pi'ograni  Lila-ary  Access 
Package  which  will  examine  the  .-Vda  specifications  which  make  up  the  high 
hwel  design,  and  automatlcall.v  generate  .skeleton  bodies  for  them  which 
slninlate  the  intended  working  of  each  .-Vda  unit.  Thus  it  is  ijosslble  to 

'■I'eate  a  preliminary  executable  at  an  early  stage  in  the  design  work. 

siiici'  !  he  do'-iimentatlon  for  each  unit  is  Included  in  and  wltli  the  code,  tlie 
i-ode  (ends  to  be  better  ciocittnented.  and  the  documenttition  Is  certain  to  be 
cui-rent  and  in  sync  with  the  code.  Removing  these  pitfalls  make  code  more 
I'asliy  i-ciisable. 

Because  of  the  structure  of  the  d-ata  base  in  which  the  inrormatlon  about  the 
code  is  stoi-ed.  code  Is  naturall.v  divided  into  Interface  and  Implementation 
|■o<|(■.  Intei'face  code  is  generally  .lust  those  Ada  specincatlons  that  the 
outshle  world  needs  to  access,  while  implementation  code  tends  to  be  not 

tie-  b()dl(‘s  for  those  s()ecincaiions.  but  ;ilso  whatever  utility  packages  are 
ii'-cd  lo  hamlle  intermd  details  which  users  of  the  system  as  a.  whole  should 
iic'.ci'  know  about. 

The  Ada  pai-lomlii'i,  mechanism  is  fully  supported.  In  addition,  the  data  base 
■oiitalns  the  c'mcepr  of  "(•.al.-ilogs”  which  are  dh'iiled  into  the  liilerlace  .and 
implementation  parts  describe(|  abov’e.  'I’liese  catalogs  pro\'lde  a  higher  le\('l 
packaging  mechanism.  for  iiisinnce.  a  user  might  ha\'e  a  I  rig  package,  a 
iinnmrlcal  i ni cgi-ai ion  and  dlffereiii Ini h.ii  imeknge  niid  n  llnenr  programming 
i  acK.agc.  all  of  wli'eli  might  be  grouped  together  to  form  a  math  eatalog. 


■jS  .N  -N 


When  the  system  Is  Inlilally  described  using  I’SL/PSA.  a  large  degi-ee  ol' 
abstraction  Is  possible.  .-Vs  the  system  evolves,  the  abstraction  mechanisms 
gradually  become  those  mechanisms  provided  by  .-Vda. 

Byron  provides  full  access  to  .-Vda  typing  mechanisms. 

The  system  permits  code  to  evolve  easily  as  new  requirements  or  new 
Implications  of  old  lauiulrements  are  discovered.  This  may  result  In  newer 
portions  of  the  system  undergoing  design  while  older  portions  are  In  the 
coding  phase  of  the  life  cycle,  but  this  poses  no  problems  for  the  s.vstem. 

13yron  provides  Mu'  full  cai>abiHty  of  .-Vda  generics. 

It  would  be  possible  to  write  a  macro  processor  using  the  Byron  Program 
Library  .Vccess  Package,  bur  no  kk)!  for  this  puri)o.se  currently  exists. 

PSL/P.S.-\  permits  data  flow  anal.vsis  as  well  as  other  design  methodologies. 

In  addition,  the  Byron  data  base  maintains  the  Information  needed  to 
construct  data  flow  diagrams,  although  no  ux.)!  Is  currently  i)rovlded  to 
perform  this  anal\sls. 

.\  calltree  generator  Is  provided  wliii  the  Byron  t(X5ls.  Information  exists  for 
more  detailed  flow  of  control  analysis,  but  current  tcwls  do  not  take  advan¬ 
tage  of  It. 

12.  Is  there  a  paradigm  embedded  in  your  system?  If  so,  describe  It 
briefly. 

The  PSL/PS.\  partidlgm  Is  that  a  system  may  be  described  at  a  high  le\'el 
a.s  :t  series  of  objects  or  entities  and  the  relations  between  them.  These 
relatUms  nuvy  t:U\e  man\  forms  and  describe  the  interactions  between  the 
objecrs/eniities. 

'riie  Byron  [taradlgm  is  that  ttfter  a  system  has  been  siteclHed.  it  is  possible 
to  describe  it  using  .Ada  code  ami  structured  comments.  In  general,  the 
design  will  begin  prlmarilx'  a.s  structured  comments,  and  code  will  bt-  .added 
a.s  the  de^-lgtl  and  eodlng  yet  mofe  (•f)mplete. 

i:l  Do.scrlbe  the  <;xternal  Ux)ls  with  which  your  system  Interfaces  (Ux)l 
compatibility). 

It  I'Msy  to  liitcfl'ace  the  .\  let  a-B\'ron  I(K)Is  wlt.ll  other  l(X)|s.  I)ec:ius('  both 
PsL/PS,\  and  Byron  pro\-l(le  tools  to  peiunit  the  user  to  extract  liiformailou 
from  iiic  ba.-'e  :iiid  rrcuie  :i  |•l■po|•t.  ('arefiiHy  liandleil.  this  report  then 
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hecoines^  the  Input  to  the  tools  In  question.  .\lso.  the  icxjIs  within  Byron  are 
icxjsely  coupled.  Bor  Instance,  the  Byron  document  generator  outputs  a  tile 
which  Is  passed  to  a  ibrmatter  lor  Hnal  formatting.  Some  users  prefer  to 
use  a  formatter  other  than  that  supplied  with  the  system,  so  they  decouple 
the  formatter  and  Install  their  own.  They  only  necessary  modification  Is  to 
have  the  document  generator  output  slightly  different  formatting  commands, 
and  this  Is  easily  accomplished. 

1-1.  Describe  how  your  system  supports  hierarchical  decomposition  and  flow 
direction  (topdown,  bottoms-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  object-oriented  design. 

The  PSI,/Ps.\  poi'tlon  (d'  the  system  supports  a  variety  of  design  methodolo 
gles.  Including  \'ourdon.  Warnier/Orr.  De.Marco  and  Object  oriented  Design. 
The  c(M'e  of  PSL/PS.\  Is  the  Problem  Statement  Language,  which  permits  a 
usei-  to  describe  a  sy'^iem  In  terms  of  objects  and  the  properties  of.  and 
relations  between  these  objects.  Different  architectures  will  result  from 
different  interpretations  ithvced  on  the  objects.  For  Instance,  the  objects  may 
rei'irt'stmt  data,  or  they  may  represent  program  units.  When  the  design 
pa.sses  to  the  Byron  portion  of  the  system,  the  methodology  used  may  again 
var\'.  Depending  on  how  the  Byron  system  Is  configured,  different  methodol¬ 
ogies  may  be  supported. 

In  general.  t!\e  natural  motle  of  the  system  Is  hierarchical  decomposition.  .-Vs 
the  system  evolves,  the  ta.sk  becomes  better  understood  and  the  need  for 
new  units  becomes  apparent.  This  does  not.  however,  preclude  the  use  of 
bottom-ui)  design  technkiues:  If  a  given  set  of  packages  Is  available,  that  will 
tend  to  influence  the  design.  a.s  |)eo|)le  write  specifications  which  the  existing 
packages  satisfy  ami  lncorpora.te  them  In  the  system. 

15.  Is  your  system  supported  by  formal  syntax  &  semantics?  Dc.scrlbe 
briefly. 

'Idle  PSL/PS.\  system  supports  a  language  called  the  Problem  statement 
Language.  'fills  language  periiiils  ihe  description  of  objects  in  terms  ol’  their 
p|-operties  and  I  hell’  relations  wit  h  other  objects.  Foi-  Instance,  t  he  staU'- 


DFf  l.Xll  PK()(  I'lSS  new-employee-processing: 

I )FPI\'IsS  hlred-em|)ioyee-report : 

■lilies  :i  [ii'oeess  object  "  new-em  plo\’ee-processl  icg"  whieh  (Teales  as 
ill’ei  l-<’in  plo\  ee-|-e|  lOl’l  "  . 
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The  Byron  system  supports  a  superset  of  Ada.  that  Is,  Ada  with  the  addition 
of  structured  comments.  These  comments  take  the  form 

- 1  <  ada_ldentiner:  ><  txt  > 

where  the  ada_ldentiner  Is  a  keyword  describing  what  kind  of  text  the 
comment  Is  expected  to  contain.  Examples  of  keywords  are  ’’overview," 
"algorithm"  and  "modifies."  The  user  Is  permitted  to  define  keywords  by 
stating  the  name  of  the  keyword,  what  kind  of  Ada  entitles  It  may  be 
:tssoclated  with,  and  the  life  cycle  phase  when  It  Is  expected  to  be  specified. 

16.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  8l  maintaining  It). 

Byron  Costs 

Mlcrovax  V'ax  7xx  V'ax  8xxx 

per  primary  CPU 
required  training 
(2  persons) 

TOTAL 

Maintenance  for  lirst  year  Is  Included.  After  that.  It  Is  20%  of  the  purchase 
price. 

PSL/PSA  C(tsts 

approximately  $120.0(X1  total  (rough  order  of  magnitude) 

includes:  5  copies  of  Structured  Architect 

1  copy  of  Architect  Integrator  (Including  report  specincatlon 
interface) 

PSL/PSA 

Meta-Plus  (P('  gratdilcs  package) 

^  person  irainlng  In  Ann  Arbor,  Consulting 

17.  Indicate  the  hostablllty  (metisure  of  degree  of  portability)  of  your 
system. 

Mcta-FLvron  will  be  available  on  any  DEC/MXX  system  running  X'.MS.  IBM 
rc-hosts  to  various  o[)crallng  \vsiems  are  [)|anned.  Byron  a.s  a  stand-alone 
tool  is  available  (ui  IBM  ;t7()  arclillectiires  running  eltlu'r  CMS  or  MX'S. 

1  )L( '/\'A\'-\’MS.  and  tlic  S|)crr\’  1  l()()  '^ci-lcs.  PSL.PSA  as  a  stand-alone  tool 
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$1.5.000  $25.0(X)  $.35,000 

$  1.100  $  1.100  $  1.100 

$16,100  $26,100  $36.1tX) 


available  on  all  of  the  above  systems  its  well  as  DP"C  L'LTRIX  and  Aitollo 
INtX. 


Byron  Itself  Is  written  almost  entirely  In  Ada,  as  It  Is  fairly  easy  to  relKtst  It 
to  any  system  which  has  an  Ada  compiler.  However,  a  large  amount  of 
code  Is  Involved,  so  a  rehost  Is  not  necessarily  a  fast  or  cheap  job. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/reprcsen- 
tatlons  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

'I'll''  '^y^^tein  directs  Us  focus  toward  the  creation  of  software,  so  vei-y  little 
■'iipport  foi'  tasks  such  as  hardware  design  Is  provided.  It  is  possible  to  use 
lilt  ";\>tein  to  exrtress  the  requirements  which  such  tasks  place  on  the 
''ofr  w  ai’c. 


19.  How  complete  Is  the  methodology  -  do  Its  principles  embody 

-A  development  methodology  only 
-A  design  methodology  only 

programming  methodology  only 
-A  project  control  methodology 
-A  management  methodology 
-All  of  the  above 

'I'lie  system  attempts  to  be  tas  methodology  free  as  posslltle.  'hhe  PSL/PSA 
portion  of  the  system  can  support  the  methodologies  of  \'()urdon.  Warnl- 
'■|•/(.)|T  and  DeMarco  as  well  as  Object  Oriented  Design.  The  B.t’ron  portion 
C'f  the  s\xt(.|n  Is  similaijy  flexible.  .XevertheDss.  if  the  user  doesn't  want  to 
IOC'  an\'  C''! :d)lished  methodology,  there  Is  a  default  methodology.  This  Is 
'  riui:iril\  -I  design  and  iirogrammlng  methodology,  dealing  with  the  infornm- 
timi  whieh  should  be  present  In  the  code  at  various  stages  of  the  life  c\clc. 

UO.  Describe  how  your  .system  supports  a  team  development  approach. 
([\und)('r  of  stations/users). 

In  j.'  ii'  r:il,  tliei'c  iii'c  no  limits  to  the  nund)er  of  users  on  the  system.  'I'lic 
;  rc  tlrnl  Hinli  i-  that  </f  the  computing  pow-er  of  the  machine  being  used, 
(ulicr  than  that.  i’sL/PSA  has  ijcen  ust-d  on  luaiiy  large  projects,  and  B.^'ron 
hn.'  bc'  ii  loed  ill  at  Icn.si  one  |)|-ojec|.  whUdi  peaked  at  approxlmatclx'  HftN’ 
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21.  Describe  how  your  system  supports  deslgu  trade-olTs. 

It,  Is  possible  to  Include  design  rational  In  the  design,  and  to  describe  possible 
future  enhancements  In  ways  that  make  them  easy  to  find  when  time  or 
money  become  available  to  perform  the  enhancements. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

The  system  assists  the  user  In  creating  software  throughout  the  entire  life 
cycle,  from  requirements  analysis  to  test  and  maintenance. 

22.  List  the  names,  addresses,  and  phone  numbers  of  five  (customers)  major 
users  of  your  system. 

Paul  Szulewskl 

Charles  stark  Draper  Laboratories 
M.S.  71 

Technology  Stiuare 
(  amtirltlge.  .\L\  02L29 
(t)17)  2.58- 1832 

[.arr\‘  Gilchrist 
Hughes  Aircraft  Co. 

M..S.  Iil8/L21.5 
I'.JOl  W.  .MaU'eru 
P.O.  Pox  3310 
Fullerton.  C.\  92(53-1 

1711)  732-57(50 

Paul  \\'(.)od 
1  WlS'i's  ( 'oiqioratiou 
M.S.  5’11A(3 
I  ■,\ls^'s  f>:u-k 
P.O.  Pox  ()1.52.') 

SI.  P:iul.  .\I.\  .a-uKSl 
(Ill  2)  1.5(5-7300 
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Mike  Wheeler 

Grumman  Melbourne  Sysicms  Division 

Huntington  Quad  ^3 

-tth  Floor,  M.S.  .J03-118 

Melville.  .Vt'  117-16 

(516)  752-3169 

Bob  Calland 

Naval  Ocean  Systems  Center 
Code  62-1  (B) 

San  Diego.  CA  92152-5000 
(619)  225-6231 


[ntcgrated  Systems,  Inc. 


1.  Describe  bow  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

AuroC'odir/Adn  supiiorts  the  early  detection  of  Inconsistencies,  closure,  and 
t'l'r'-'i"'  in  the  rollowiin^  ways. 

a.  Error  checkin':;  on  entered  data  Is  performed  automatically  a.s  the 
'■leinent.s  of  a  desiy;n  are  a.sseuibled  from  a  library  of  bulldlni;  blocks,  d’hi' 
ensures  that  all  data  dennitlons  are  consistent  with  the  Intended  function. 

Ii.  d'lu'  ■iraphical  interface  automatically  provides  an  unambic;nons  visual 
repi-esi-ntation  of  the  functionality  and  Interconnection  of  all  elements  or  a 
s\siein.  This  'j,i\-es  visual  feedback  on  Inconsistencies. 

c.  The  model  liidtei-  that  prepares  system  moilels  for  simulation  and 
cod)'  'generation  [lerforius  extensive  checkin!;  for  completeness  of  model 
'pfciricaticms  and  inconsistent  interconnections. 

d.  A  comprehensive  simulation  capability  available  with  AuttA 'odt'/Ailn 
pro\  ides  I  he  ultimate  test  for  accuracy  and  completeness  of  a  design. 

Desl'^ns  can  lie  slmnlaK-d  directly  or  the  actual  .Ada  ^ode  that  is  iirodueed 
l>\'  Allied  odc/Ad;i  c;in  be  simulated. 

2.  What  type  of  progress  metric  dtxts  the  system  produce?  Is  It  (luantin- 
:ible  meiLsure  of  completeness? 

Aiiinl  odr/Adn  does  not  direcilx'  produce  a  progress  metric.  It  will.  howc\i'r. 
|•(•po|•I  on  missiii'i;  or  incompletely  s|)ecined  elements  when  retiuested  to 
a.ssi-ndde  a  system.  Indirectlx'.  its  automatic  docn ment.Uiou  features  allow 
\oii  to  cxaiiiiiiic  the  nirreni  state  of  cotttplellott  an\'  system  or  sysicm 
'•omponciii . 


2.  Describe  how  your  systetrt  supports  documentatiott,  program  managetitcutt 
aitd  (torttrol. 


\ui<>(  '(fdc/Ad:i  is  iinscii  on  block'  ilia'gfattts.  These  tlia'grtitns  arc  created 
s  raphicall\'  and  form  the  Ita.sis  for  dociitnetil  at  loti  of  a  design.  I  scf  specified 
ie'<imi|  dociimeiii  at  ion  on  sysontt  eletitents  cati  he  entered  (and  is  auii'inaiical 
l,\  maiiiiaiiied  in  i  Im  daialci.se)  as  i||c  s.vstcm  is  created.  I’ro'gram  mana'c,e- 
iiieiii  and  CMiiirol  can  bi-  exerciseil  |)\-  aitxillar.v  software  (dictated  b,\  the 


ii'-m  I  hnt  |!i-(i\'lil<'s  for  roiiniiu ration  c-oiiti'ol.  accnss  rest  rictloiis  aiul  nioniloi'iii'i, 
of  the  ilaialiasf  filn^s  oroatnd  by  AuloCodf/Atl:). 


■1.  Describe  how  your  system  supports  real  time  design. 

In  Ain()C'0(lt^/A(]:i.  a  system  design  is  speeined  :us  a  collection  of  Process- 
Blocks.  Blocks  within  a  Process-Block  are  connected  with  each  other  and 
with  the  outside  einironment  via  data  Hows  or  control  flows.  I'hese  flows 
are  referred  to  a.s  data  or  control  signals. 

Process-Blocks  cnti  contain  primitive  functional  blocks  and  perhaps  other 
Process-Blocks  (the  system  is  fnll.v  hierarchictil).  .-V  large  liltrttr.v'  of  preilermed 
primiti\'e  lilocks  is  prox'ided  for  constrncting  compntational  algorithms  tmd 
control  logic,  Inclnding  state  transition  diagrams.  At  the  I’roccss-Bloek  le\-el. 
the  user  can  speclty  attrll)ntes  that  determine  computational  triggering  and 
timing  of  tliat  process.  'I'his  allows  the  iista'  tet  specifs'  both  periodic  and 
e'cent  dricen  re:il-time  systtniis  tliai  encompa.ss  mnit  irat  e/mnli  it  ask  applications. 

5.  Describe  how  yonr  sy.stcm  supports  coneurreney,  partillellsin. 

Au/(}(  (><lt‘/Ail:i  fii'ox'ldes  a  rettl-lime  model  that  \'lews  systems  as  (■(^lle(■l  ions  of 
Cl 'iiciirreiit .  prltarii  ized  tasks.  'I'iK'se  tasks  can  be  scHediileil  for  periodic- 
execution  or  can  be  trlggertal  1)\-  ti.s.vnchrctnoiis  (wents.  Ixxeemlon  of  these 
tasks  is  (•('nducicd  oti  the  basis  of  preemptive  priority  Itnsed  scliediiling. 

Data  and  control  flows  laassing  between  tasks  are  handU-d  such  that  all  tasks 
c:iii  be  sMfciy  conifairlng  in  iiarallel.  'I'lnts.  the  .Ada  source-  code  generated 
b\  Aui()(  n(l(-/Ail;i  represt-nts  applications  thttt  ctm  Ik-  Itirgetcd  to  uniprocess¬ 
ing  as  well  as  miiltlproecssliig  ami  dlst  ril)Ui t-d  envlromm-nl s. 

().  Is  yonr  system  eotistrained  to  a  ptirlienlar  implementation  language  (Ada)V 

No.  .\  !■'(  )irrP.\.\’  \ersion  of  Auf(><  oi/c  is  also  available.  A  (  version  is 
amici'  I le\ clopmciii . 

7.  DcKts  you  system  prod  nee  Ada  PDL? 

r!ii^  I  loick-diagi’a III  iaiignage  iise(|  in  Aulo(  oilr/Ailn  is  a  graphicnl  in-occs^ 
ii -s  •I’l  pt  i<  ,11  language.  .\da  i-ode  is  prodimeil  direi'llx'  from  these  bUnlv 
iiagraiii'.  X’iri  iial  co(|e  :is,,oci;i  1 1.,  |  with  an  Ada  compatible  Pl)|.  can  lie 
i(i-c[i(.il  ill  I  hi'  'j,rnrr:ii  Cl  I  code  b\'  the  user  x'ia  code  geiieiait  ion  lemplales  i  Imi 
as  I  |•o^i,|(■d  a.s  part  of  the  oilc/Ail:)  s\siciii. 
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8.  Describe  how  your  system  supports  life  cycle  liitr:iph:Lse  &  IriterplKuse 
comniiinlcatlous. 

.\.iuo(  nil^\/Ad:i  supports  system  developmeiii  by  iisiiiy  :i  si  riict  m-ed  ‘4i':i[)lilcul 
lanyiia^e  that  Is  applicable  to  all  phases  of  the  development  proce.  s.  d'lie 
use  of  a  I'ommon  graphical  notation  dramatically  linproxes  (■(ainmunlcatlons 
throughout  the  software  life  cycle  and  eliminates  i  I'ansfoiuiiai ion  eri’ors  that 
can  occur  lietweeti  phases.  Specincatloiis.  <lesigns  and  <locumeiiiati()n  are 
maintained  in  catalogs  that-  can  be  accesseil  by  both  ilesignei-s  and  implemen- 
toi"-.  Durltig  the  Implementation  idiase.  one  of  the  principal  benenis  oi’ 

V/;b '(  I  .v/e/'.Af/a  is  I  h;it  the  iin|ilementation  pi'odiicial  b>  ihe  code  geiiei-aior  is 
an  exact  expressicMi  of  the  design. 

Is  your  system  automated,  executable,  compilable? 

'I'lie  generation  of  code  frcaii  block  dlagr.ains  is  automatic.  'The  .Ada  code 
generated  by  the  code  generator  is  both  compilable  and  execuiable. 

10.  Describe  the  graphics  supftort  for  your  system. 

\  iir<  i(  <>i  provides  a  powerful,  gntphic^-orieiii  cd  ini  eraci  i\  c  interface  with 

liardcopy  atippcM'i  for  ;i  numlier  of  industr\-  standard  plotters  and  laser 
lifiniers.  Wt.trkstation  verslcttts  of  make  e\uensi\’e  use  of  t  he 

latent  in  workstation  interface  tetdiiKtlogy.  I'lie  interface  include--  multiple 
'Aindows.  nioiise  drl\'(-n  graphic  la\'out  and  manipulation,  pop-up  forms,  and 
mill-down  menus. 

11.  Describe  how  your  system  supports  concepts  of; 

-I'itirly  prototyping  vs.  rapid  prototyping 

-Software  reusability 

-Information  hiding 

-I’ackaging  conccipt 

-Abstraction 

-'I'yping 

-10  volution  ary  developmetit 

-( lenerlcs 

-Macros 

-Data,  flows 

-t'ontrol  flows 


Aiir('(  o<Ic/.\(l:i  tncilit atcs  lioth  rap'nl  and  early  prototyplie^  of  a  |•eal-tll^e 
sysioiu.  A  prototype  of  a  system  (leslu;n  can  1)C  (pik'kl\'  assemhleil  In  the 
AnfiAode  graphical  environment  and  then  evaluated  uslne  .  It/foC 'odes 
extensive  simulation  capability.  An  early  prototype  can  be  prosresslvely 
refined  Into  a  complete  design.  At  any  point  In  this  |)roeess.  the  engineer 
can  Invoke  the  code  ge'terator  to  generate  the  code  for  any  subsysiem  within 
the  design,  thus  allowing  evaluation  of  the  actual  Imitlemeni  atlon  i-ode. 

Instead  of  storing  the  actual  Ada  code  for  a  system  Implementation.  Aiu<y 
( Adr‘/'Ad:i  Uses  a  template  of  the  code  with  which  It  regeiiertites  the  rode  as 
needed  based  upon  a  block  diagram.  'I'he  block  diagram  sfieelllcat Ion  Is  a 
reiisabU'.  t ransportalde  re[)resentatlon  of  a  system  th;ii  can  be  stored  In 
simple  AStll  files. 

The  ronn  of  hierarchical  modeUng  used  by  Autocode/ Adn  allows  the  user  to 
eoiistriict  s(hf-coni allied,  inoduhir  components  at  an.\'  le\'cl.  Details  eatt  be 
hidileti  within  the  modular  components  en:d>ling  the  tiscr  to  di-al  with  tnuch 
more  abstraci  ob.lects.  thus  rialucing  the  level  f>f  com plexit .\'  of  the  systetn 
lit'lng  create(l. 

I’ackaging.  as  It  a|)plles  to  .Xda.  Is  supported  at  code  generation  liinia  'Die 
ri).le  whleh  is  generated  l).\-  Auto(.odo/Adu  is  |irovided  as  one  or  tnore  Ada 
pai'kages  that  can  be  siippletnented  by  user  library  [lackagcs.  Features  of 
tin  packaging  catt  be  controlled  by  the  user  via  the  code  gcni'ratlon  tmn- 

phltCs. 

\iito(  n<lc/  \dn  allows  tiK'  user  to  view  his  s.vstetn  at  ati.\'  desired  Uwel  of 
aPsr  raction.  If  the  user  begins  with  general  idetis  that  form  a  top  kwel  view 
of  tin'  sysrcin.  this  \-iew  catt  be  progressUely  decom|)ose<l  itito  lower  levels. 
FliiaiK'.  a  h'\el  N  reache'l  that  recpilres  only  prltuitive  fiitict lotial  d('scriiitiotis. 
With  Auio(  ode/Adu.  this  decomposition  |)roeess  Is  accomplished  by  manipul:il- 
iiig  Icrni'  to  describe  the  s_\-srein  in  mueh  the  same  wa.\'  that  an  I'ligineer 
-is'cichcs  ilc'-igns  by  hand. 


|.  iiiir!:iii;i.|ii  :i|  ipiia  i.\pes  art'  |■r(•defl^ed  b.v  Auto(  odf/Adu  and  are  implicit  in 
I  In  M-i  • 'f  ''ach  rmiciional  block.  'These  i.x'pes  are  aiilomal  icall.x'  mapped  inio 
iaiignage  type  (leniiitions  during  code  geneimtlon. 


\  V'leii,  dev'mii  .-aii  e\'o|\e  ihro.iigh  progressh'e  refinement  of  an  earl.x' 

I  f.  n  I'.pi'.  Till'  i.'.'pe  of  (wolui lotiar.\'  process  is  stroiigl.v  snpporied  b.\  the 
-'.-tma  -i|||,|i;ii  loll  capability  in  Auio('i>dc  which  pro\  ides  for  conilmioiis 

;i  .  ,  iliiall.  II  .  y  I  he  -v-Iem  or  atl.\  of  its  l•om  potien  I  s.  .\l  each  siage  in  the 
.  1 1 1  r  i' a  la  r;.  iiioic---.  ipc  cnrreni  di^-lgn  N  captured  and  mainialiied  in  a 
ijii  --alal'C  \’.llic|i  i-ali  be  i|o-d  I.-,  enforce  co|  |  fig  Ufa  I  iol  I  III  a  1 1  a  ge  1 1  n  a  1 1  . 
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Tlu'  (-('lu-epr  ol'  U'lii plat c’s  is  used  extensively  In  AiiCoCode/Ailn  because  eacli 
predefiueil  luilldiny;  block  In  t  lie  'iraplilcal  language  Is  such  a  teniplatc. 
Customization  of  mtch  tetii|ilate  Is  provided  by  data  supplied  by  the  user. 
Alsix  Ada  language  getierlcs  can  be  utilized  directly  by  the  user  within  user 
specined  "source  code"  blocks. 

'text  orletiteil  macros  are  tiot  tised  In  AiitoC(Xle/Adi\. 

Aiir<>( \>dc/Adn  IS  based  upon  a  graphical  block  diagram  latigitage  that 
''pecifies  Hows  of  both  data  atnl  control  signals. 

I‘2.  Is  there  a  paradigm  embedded  In  your  system?  If  so,  describe  It 
brlel'ly. 

Tl;.;  iiaradi-,iii  embedded  in  AntoCodo/Ad:^  Is  the  block  diagram.  It  rorms 
the  eomplcte  basC  Tor  design  and  Implementation  of  real-time  systems. 


Id.  Describe  the  external  Uxtis  with  whlclt  your  system  InterTaces  (Ux)l 
comptitlbllity). 

Auhd \!dr,Ad;i  bit  eri'aces  with  .MA'l'Rl.X  and  S\'s:'riOM_lU 'ILD.  which  are  both 
l''l  pi-oduct^  that  siipiiort  system  design  and  sltnulation.  Files  are  created  by 
Aiiftd  (>dc/Ad:i  in  a  I'orm  that  can  be  ea.slly  monitored  ;md  controlU'd  by  user 
'•P'e’-iiled  coiingiiratioii  titanagcitient  and  control  tcxds. 


11.  Describe  how  your  .system  supiKirts  lilerarchlcal  decotn position  and  How 
dlntctlon  (topdown,  bottotns-up,  both,  etc.),  architectural  perspectives  (designer 
creativity)  and  ob]ect-orlented  design. 


Th'’  b|('.-k  diagra  111'' *creat  ed  with  Aul()('(>dc/Ad:i  ari'  rull,\’  hierarchical  in  i  Itai 
:iiiy  I ’roci'''x- 1  P(  )c|<  (■•111  contain  other  Proces.s-Dlocks.  I’roeess-I  docks  can  also 
be  rcplicai  c(  1  I'rcihv.  'riterc  are  no  restrictions  on  imildlng  sy-'iems  rrom  the 
top  (lo\'.ii.  I  he  boiioin  up.  or  the  middle  out.  Ciraphlcal  la.\out  i--  I'ree-rorm. 
'Pla  i(b,!e(  i'-  in  Anioi  <Mlc/.\d:i  are  well  dellned  blocks  and  user  created 
Mi'chiiar  I' iiiipoiicni''  that  are  riinctions  of  ii'^er-dermed  parameter''  and  ol'  the 
daba  illlo  llieni. 

IT).  Is  your  .system  supported  by  I’ormal  .syntax  .V,  semantics?  De.scribe 
briefly. 

\  /;<('.(/('  \(/,a  i'  bascil  ( >n  a  concisc|_\-  (lefineil  inleracil\i'  graphical  inicrracc 

Miai  all'AV'  you  io  as'Cinble  '-.vsicnis  gra plilca ll.\  from  preilcllned  and  nsii- 
I  c(  aii  [a  .ncni '.  'I'he  semantic''  of  all  aiich  c(  ini  poiii  ml  ^  i'-  rormally 
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ilflliieil.  siieli.  iu>  roniKil  ^yIlt:lX  Is  required.  Desls^ns  can  also  la*  created 

from  coinniand  files,  which  nr.ist  follow  formal  syntax. 

10.  Outline  typical  utilization  costs  for  your  system  (cost  of  acquiring,  using, 
training,  &  maintaining  It). 

Tor  Ain<)C'(>ilc/A'l:i  on  a  X'AX.'Statlon.  typical  costs  would  be:  1.5-30K$  foi* 
the  workstation  haiahvare.  ;J.3K$  for  the  AiiroCode/Acla  .software,  approxltnate- 
ly  1K$  of  direct  tralnlici;  costs  plus  1  man-month  of  time  reciulred  to  become 
prondent.  Software  ntalntenance  costs  for  AutoCode/Ada  are  20^7 /year. 
t)uantUy  dls(H)iints  are  a\alhd)le. 

17.  Indicate  the  hostabillty  (measure  of  degree  of  portability)  of  your 
system. 

I'hc  s^'s'I'h:M _ lU  Il.h)  |)ackag('  on  which  AutoCode/Ada  Is  largely  ba.seil  is 

'■iirrmii  !\'  '-upported  on  \'AX  systetns.  IBM  mainframes.  IBM  PCs.  Worksta¬ 
tion  versions  include  X'AXsiatloiis  and  .Apollo  workstations  (SL’N  W'orkstaton 
\'ersi()n,s  are  Peing  develope<l.).  Aiit()( '<>de/.\da  Is  currently  avallaltle  on 
\  .\Xst  at  ions  :uid  will  Pc  mtide  avtiilaPle  on  other  systems  upon  demand. 

18.  Describe  how  your  system  supports  Interdisciplinary  abstractlons/represen- 
latlotis  (l.e.,  systems  engineering,  software  engineering,  hardware  engineering). 

'rite  block  of  diagrams  of  Auiocode/Ada  are  oriented  towards  systems 
(■iigliieering.  Similar  block  dl:igranimlng  techniques  are  commonly  itsed  (l).\' 
hand)  in  ^-ofiware  enginecrltig.  AuioCodo/Ada  Is  a  software  engineering  tool 
that  ■'Upports  sNsteiu  ''pecincailon.  \vstem  design,  automated  documenttitlon. 
-'imulatioii  and  co<|c  gciu'rat ion. 

1<).  I  low  complete  is  the  metluxlology  -  do  Its  principles  embody 

-A  development  rnettiodology  only 
-A  de.sign  metficxiology  only 
-A  programming  metluxlology  only 
-A  project  control  metluxlology 
-A  management  metluxlology 
-All  of  the  abov(' 

\ui' '(  ( ■<li'/Ailn  '-ail  Pi-  u'-i’d  to  '--iq)|iori  an.v  structured  design  niid  dc\'c|o|i- 
iii'  iu  Hil  l  hod')log,\ .  I ’|■',,g|•;|^||||il|g  is  snpiioi-icd  by  automated  eo(te  generariou 
■ili'l  call  Pi'  il'i'd  I'l  deVe|o|i  cveeiil  able  applienl  ion  code  (with  exeeplion  of 
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liy  :ui\illar\’  software  that  provides  for  connguratloii  ccMitrol  and  monitoring  of 
rile  dataliase  tiles  created  l\v  AiitoCode/Adii. 

‘2().  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/users). 

AinoCode/Ad:i  supports  team  development  lhroii<;h  the  decomposition  of  a 
-<\stem  into  a  hierarchy  of  subsystems,  each  of  which  may  Ite  developed 
Independently  and  then  Integrated.  Catalogs  of  block  diagram  representations 
of  system  comi)onents  can  be  shared  between  development  teams  as  neces¬ 
sary.  The  numlier  of  simultaneous  u.sers  Is  determined  only  by  the  host 
system.  For  example.  V.\X  hardware  can  support  multiple  users  on  a  single 
machine  (jr  distributed  workstation  access  through  a  network.  User  supi)Hed 
‘•onfiguratlon  control  i(x)ls  can  lie  used  to  control  access  to  systems  umh-r 
dc\  ciopmeni . 

21.  Describe  how  your  system  supports  design  tradc-olTs. 

.\nh>(.'()dc/.\d:i  sup|)orts  design  trade-offs  through  ra|>hl  sintulatlon  and  system 
protoi  ,\'plng. 

22.  Indicate  the  range  of  problems  to  which  the  system  can  be  applied. 

Aiit()(  '(>ilr/Ad:i  Is  a  real-time  system  design  and  speclllcallon  tool  with 
applications  in  guidance  and  control  problems  for  aircraft,  spacecraft,  missiles, 
pi’occss  control  "'\stems  and  servomechanisms.  Extensive  simulation  caitabill- 
ties  are  current l\'  available  with  the  AiiioC'odc/Ad;)  t<x)lset  (and  more  are 
nndei'  de\-(>lopment )  making  U  suitable  for  use  In  major  simulations  inclmling 
iiattif  management,  trajectory  evaluation,  etc.  .Vutomated  code  generation 
prosides  a  '^ignitlcant  capablllt\-  for  real-time  simulations  including  thost- 
rci|uirlng  haialware  in  the  loo]). 

22.  last  tlic  names,  addres.ses,  and  plionc  numbers  of  live  (customers)  rntylor 
users  of  y<mr  system. 


\iin,(  i)dr/Ad:i  is  fv  in  bcta-les|  at  three  sites: 


I’alriff:  Uo'^ia's 

I  iii\  I  :  1'  >  ()f  1  loust(,u  (  h-ar  Lake 
1  li'i.ll  I ''r|ii]Mlo'j;\-  |:il) 

ll"Mso,n.  TX  771  in.s- 1  Otis 
TIM  I  |ss-.-,!l'_>  I 
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Alok  D;^ 

i;s.\F/RPL- 

DYSS-Stop  2-1 

Eduards  AFB.  CA  93523 

(805)  275-5-112 

Xii-anhan  Rao 

Boeing  Military  Aircraft  Company 
MS  I\.7575 


SoClwuro  I’rodiicts  and  Services,  liie. 


>  ■ 
k  . 


V 
V' 
v' 

V  : 


l.  Describe  how  your  system  supports  early  detection  of  Inconsistencies, 
closure  and  errors. 

Both  ei'i'or  pre\'ention  and  e:irl\‘  eri'or  delectlon  arc  |■olltillcl\■  Mipporlcd  by 
EPOS.  A  pcnvci-riil  set  of  analysis  [)r()<j;rains  jn-ovlde  redundancy,  conslsi cnc\ 
and  completeness  check.s  of  parts  of  the  s.\stein  reciuirenients.  a.s  well  as 
checks  Tor  completeness,  type  conlTicts.  Inconsistencies  In  the  exporl/lmport 
relations  between  modnles/paekaixes.  misslnii;  value  a.ssbj;nments  Tor  data.  etc. 
Sv)me  tcxil  anal\'sis  Is  doin'  automatically:  the  remainder  is  iisei-i n\okcd. 

LcP(')'-'  checks  the  rt  ciuiremeni s  spcclllcat Ion  and  eoMcepiunl  desimi  Cor: 

-cori'cct  s,\'ntnx. 

-compatibility  ol'  rornml  elements  input  with  Inrormallon  in  t  lie 
pro.lect  data. 

-compatiblUty  oT  decisioti  rules  with  decision  pi’ocess  dcnniilons. 
-com|)leteness  and  consistenc.v  of  decision  tables. 

-r(Miundanc.\'. 

-comiilet eiiess  of  substitution  and  references  to  rei|ulrement s. 

Id’OS  checks  the-  system  design  speciricatlon  for; 

-comiiletcness  of  hierar'diy  design. 

-name  conflicts. 

-non-r('fei-enc('d  design  comixments 

-lm[)ortant  hierarchical  features  such  as  data  txpe  and  ranee  consistency, 
-non-cotit  radlctorx'  sy nchronizat  ion 
-completion  of  pro.lcct  rei|ulrement s. 

Additional  anal.X’sls  and  support  of  automatic  code  jon  I'acililies  sindi  as 

cheeks  for  siifriciency  of  design  for  t  ransfoiauabilit >■  to  Ada  code  are  also 
'-upp'  irt  ed. 


fe  ■ 


h 


^3. 


2.  What  type  of  [)rof;ress  tnetrlc  dtx's  the  sysLem  iiroduceV  l.s  it  (luarttin- 
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able  measure 

'I'liere  Is  siipi 

r 

prciyram  l•o(lc 

r 

coin  plel  eness 

• 

.V 

measured  b\- 

fuinililienl  of 

t 

'iuc|e  unilled 
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iii:in:i.:rin<‘iit  luMh  liit--  i>cniiiniirj,  :i  ovci'x  lew  dI 

lr\ cK'pllit'Ilt  I  lll'oimliolll  I  hr  |)f0.jrii. 

l^oscnbo  tiow  your  syslctii  supports  docurufnitatlon,  proKrani  iriatiaKcirKMiL 
and  control. 

1 ’■  I'f  ii  ir-  rt'  (.)i-  cc'iiiiilrtr )  (]( >c u iiu'ii I  a t loll  Call  l>c  pi'i )i  1  iicr ( I  ill  scN  cral  ways 
!!\  111  ilir  projrcl  ilatahasr.  'I'lir  sysH-in  Includes  i>roJccI  piniiiilnii:  (work 
l  i'eakdouii  sliaiciiirr,  iirnw-rk  plaiiniii'^)  a.s  well  as  jn-oject  control  (aciii- 
al  lU'armal  coiiiparisoiis.  visiiarixat ion  of  iiro'^rcss.  «>tc.).  'Fexl  and  riaiplis  are 
priahi' rd  autiMiiai  icallx'  lo  siippiMM  ilocainieni  ation.  design  and  proyi'aiii 
aiaiiayriiiriK .  I■',l't)^  will  aiitonial ically  produce  a  larye  \-arlel\'  oC  yiaiphlcal 

‘  iiipii!'-  piiwidiie^  rrprrsriil  ai  ions  oT  both  (|esi<.;ii  and  projecl  inaiiayeineni 
iiil'  ■rinai  ion, 

1.  Dc'seribe  how  your  system  supports  real  time  design. 

All  Her. -':ir\  ri:ii  limr  coiisirncis  are  lu'ovideil  in  i  he  speriricaiioii  laiic,uare 

:ii  a  '.a  !'.\  lii^li.  pr<  •Mr  iii-oriiail  ed  level,  and  are  ilua'erorr  ras,\-  lo  iindri’si  and. 
Mr  ■xanii'M.  nr  hia  mi/ai  ion.  niniiial  rxchislon.  r.\cllral  oprraiioiis.  rir..  are 
oippirird.  Xi  idiHonall,\ .  Id’O-s  jirovides  i  hr  o|)lion  lo  aniomaiirall.x  rrina'air 
Ada  '-''di'  v'l-  \da  roi|r  rra'iiinails  ui(h  I  hr  ruri  laa-  ahiru.\  lo  iirtwldr  aiiiioiai- 

•  ■  I  \da  in  siippori  of  i  hr  .\ila  drve|o|imeiii  acli\it.v.  I''nrl  In  rinore.  In‘j,li-lrvrl 
real  linir  l■o•n'(  laid^  ran  hr  I  ransroniircl  l).\'  laMOs  aulonialicall.\  inio  lowci' 
lr\a'|  \da  rode  coii'i  rncis. 

5.  I)('scrib<'  how  your  system  supports  concurrimcy,  parallelism. 

All  r"al  iiinr  asprri-'  includin'^  taskimz.  c(.)ncurrenc.\'.  and  parallelisin  are 
'upporird.  ir  I  hr  larzri  prozramminz  laiiznazr  i'or  i  hr  rode  '.rrnrraior  is 
'•apaMr  of  dralinz  with  t  h-oc  re<|nirenirnis  (as  in  i  hr  rase  of  Ada  I.  approprl- 
air  I'raj  liiiK  lonsirmas  are  zriirraied  in  the  program  (A'la)  rode. 

f).  Is  your  system  constrained  to  a  partlcuhir  impletnentation  lanzuaze  (Ada)? 

\.  .  I  hr  -N^Iriii  i-  lanzua’zr-illdrpiaidrni  .  I'or  -rlrrlrd  i  n  i  p|r  |  nr  11 1  a  I  ion 
laliana'.:'''  r-iiili  as  Ada.  I’asral.  I'diiaran.  ric.)  I  d ’<  )S  ')ITrrs  addiliolial  spriirir 
-nppO'i'i.  Id’()s  •Isv-i'.^ii  support  rnnriions  I'or  ail  laiiznazes  inrindr  assisinnrr 
r  ir  I'-i'xii.  Ir  \  ■  h  ,pn  I'  I  n  ainl  a.ssenib|\'  of  ( •!  her  Il()|.s  sindi  as  .l()\ial  oi' 
ssssnihl'.-  'a  nan  a '4' a 


D(x;.s  you  syslciii  produce  Ada  IM')lc 


No.  not  directly.  Id’Os.  liowcver.  |)|•ovld(•^s  a  dc.slgn  lantiun;;c  to  desl'^ii 
'\>^tenis  ;iiid  proyrtim^.  wliiclt  rulfillN  tlie  |■c(|ul^cllUMlts  of  f’DL  ol)jeetl\(‘s. 
Addit loiKilly .  there  is  thi‘  oinlon  to  produce  amiotatcd  Adti  code  directly. 

(  odt'  I'rnymentN  uiuy  uKo  lu'  output  to  assist  dcsicii  and  rtipid  prototypin'. 


s.  Describe  how  your  .sysleiii  sup{H)rls  llle  cycle  intraphtjse  S/.  Inlerptiase 
comimiiiicaLioiis. 


ItilTereiii  represent  at  ion  Tor  the  dilTereni  pliases  ol'  the  lire  cycle.  'rraciii'j;. 
IVedliaek.  (■('•ir'i'i ency  i-hei-ks  and.  to  son,,,  extent,  tnitomatic  t rtinsrormai ion 
are  p|'o\lded  i'etweell  these  represiuit  at  iolls.  I'd’OS's  uniHed  database  provide 
e'lrreiit  status  inrorinaiioti  to  all  pariicipatils  t  liroinylioitl  the  project  lii’e  cyi-p 


i).  Is  your  sysltun  tiuLoirtalttd,  (txttcuLable,  (toiu pliable? 


The  ^\sirni  is  hi'-hl\  auloniaii'd  i  hroite|ioiti  its  \arions  phases  d’  i )pcrai i< ai. 

It  is  a|s.  i  capable  o.i'  prov  iding  (Tor  certaiti  llOl.s)  antotttaled  siuirce  code 
^''icrai  i' 'll.  b  provides  intearaic'l  suppoct  |or  soft  ware/ hard  ware  development 
'Ctiral  I  ra  list',  aan  a  t  i(  itis  are  aillotll.aled.  'The  svstt'tlt  is  executable. 


10.  Describe  the  (traphlcs  support  For  your  system. 


It  ili/iii'i,  its  unine'l  database.  bd'()S  is  capttlile  oT  ant  otnai  ic.al  l\  yetieralltie 
_rapli'  ami  i(\i.  Intensive  'j,rapliical  oulpiti  ( liierarcli.v  dia'yrattis.  data 
'tiaicture  dla'yrani'.  'lata  I'lou  aixl  i-ontrol  How  dia'4rains.  I’eiri-neis.  ht-tr  .wtire 
bloi'K  lia'zrani'.  niodiile  cr)utieciion  dia'^ixinis.  bar  charts.  Idlin'  idiarls.  (ianti 
eiiart'.  etc.).  (irapliic  input  ol'  specintailiotts  is  in  devadopineni  (protcaype 
■.'U'sioiiv  {'ei'  liiiaaireln,'  ilia'Afams  -uid  Ho'v '<dt:\ris  exist). 


Describe  how  your  .system  supports  (toncepts  ol': 


-I'iarly  prototypiiin  vs.  r:i[)ld  prototypiiin 
-Sol'tware  rt'usabillty 
-liirormatioii  hidiiu; 
d’tickattini;  coiicepi' 


-,Absl,r:iction 


-'rypiim 

d'ivol  iitioiiary  develoititiciit 


-( itUKtrics 


-Macros 


JSuisSilisSu! 
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-l):iL:i  riow's 
-CoiiLrol  flows 

r:iri-'  I'  I  hr  ilr-.irii  r:iii  Ilf  proloix'pi'^  iislipt;  code  r^.p^i-ipion  ra[):il)irit  Irs.  l.c.. 

■  m1.'  ri-:ij;iur  iit>  for  Ada  dr\-t'l(>pinrii( . 

I'lir  I'niuired  .'lijrr;  di"-cia j ■! ii 'U  and  Mir  concrpi  of  lll'i'ary  niodulrs.  to'j;rihrr 
■siMi  '.  ■irirus  pi  .\\ cri'nl  mrrhaiiisinv  I'or  ‘-prrifvliir  aui'llnur^  ainl  srai’rhiii'j;.  ai'c 
Mir  i  f.  .1'  r.  rriixaliilii y.  u  liirh  can  hr  addia-'scd  at  x  ai'lons  lr\c|s  of 

il  't  I-rrilon. 

riir  iM'  diilr  roiirrpi  allous  i  lir  appHralioii  of  priiiciplrs  of  1 11  for  11  lal loi  1  liidlir.;. 
I'll'  Ada  aiialx'rM  parkarr.  in  addiMo'ii  lo  its  oi  Ihm'  fniiciions.  riiforcrs 

■  iMpHaiirr  wii  h  \  i'-ihiliiy  nilr'-. 

lulrr  |,-irkarr>  ran  I ir  ^ p, -ri fir 1 1  aiid  aiialxzcd  with  anal>'sls  ]ii’o‘j;rams  wlii'li 
■:  r  imp.  M'l  rvpi.n  r,  .n--i^i  nrir^  and  rl^ihiHiy  nilrr. 

\  .11--  iimidrr  ■  .f  |r\rN  .  .f  aloi  ran  ion  ran  hr  drllnril  arrordiiiy  lo  user 


1 ’r  .  ir  !l  i;r,  I  ’  \  prv  i|  |.()A'I'.  1 '.<)()  | .  1  i  \  \ .  rir.)  as  Well  as  Ii^rr-drlnird  I  >  prs  ai'r 
:  '-ihl",  \iiai\'^i'-  ir  pi-'Aicird. 

M'l'iri'riii  hiiild'  ai'r  por-jpic.  'I'l'ariiiM  of  rliatinrs  and  extrusions  possihir  from 
Mr  |■.■ln;irl•nlrnI''  'pri-ifiral  i,  .|1  lo  ilc  dr^i'ill  and  rodr. 


<  ai'r  h(  •!  .Ilf'  ri  ;\ 

■  ■ .  i  1 .  ■  r  p  I  O  a  r  1 1  i  r  \  a  i  >  I  r  . 


'poi'ir.i  in  I  hr  riirrriii  \’rrsion.  hilt  siinilai' 


I'.:.  p,:r;:  -pr-'ll  ir-i  I 

Ada  a ir ra ! '  r. 


I'  niari'o'-  i^  povsihlr.  'I'lir  st'inaiiiirs  arc  known  to  i  hr 


^p  al  a  !1  .  .1'  .|ala  !1' A\  i'  'llppr-llrd  as  onr  of  I  hr  dr-irai  inn  hodolorirv. 

Iiiailirai  lor  I  m  r  III  ai  i.  n  and  alialx-ir  ai'r  proxidrih 

"I  .  r'iiMaMoi;  .  ,i  i■o^l|••,|  flow  i^  r,|p|  „ -.i-i  r<  |.  rp  h.-r  as  a  doiniiiaiH  fiiiiriion  in 
III'  i'l  1 1  ir  I  io|  i-i  air  n  I '  1 1  drri._m  nin  Ii'mIoIow.v'.  i -r  in  addiiion  lo  oihrr  sprrillrai  io,r 

hi  .Mrr  ari  Ir  r  |.o|,  .rir.  .  l-.vi  i  ii-ix  ■  -ara  pliiral  dor  n  nirnt  al  ion  and  anal\''ir  al'i 
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112.  Is  LluT('  ;i  ciiiboddod  In  your  sysUnn?  If  so,  dcscrllx;  it 

bric'l'ly. 


1 


i 

0  . 

»  / 

0  ,* 

9 


Till'  (similar  to  Fialzer  [Balzer.  ( .  lirai  ham.  Ch'eeii:  "Sol'i ware  'I^'clmol- 

ill  Mil'  idtio'v;  i  slnii  a  .\M'\v  Paradliim" .  IBF.K  C2ornpiiU;r.  .XovciiiIht. 

I'.is;; M:  u.  nin.'inmr  later  pha.ses  (code  'Jienerat loii )  in  the  devcloiuiKMit  lil'e 
i-vi'l"  and  to  i-mi'lia.ar./e  earlier  phases. 

Id.  Describe  the  external  t(X)ls  witli  which  your  system  interl'aces  (tcx)l 

compatibility). 

\  i  ;;.  -1  iiri'ai  iiiii  rraci'  to  extract  inrortntit ion  rroni  the  data  ha.-'C  and  |iro\id(' 

;■  1'  i  iliar  I(h  M,  'rite  machine  editor  is  interraced  and  used  direct  l\-  dnrlne 
'  a  il  inm  ni .  S|,,.,.i:i|  im erl'acln',!  to  irimphic  editors  is  in  dex'elopment  (protis 
' ■  i-'ii  ais  (  ti'iiei'al  inteii'aces  to  |ilot  tools. 

11.  Describe  how  your  system  supports  hierarchical  decomposition  and  How 

diri'cLioti  (topdown,  bottom.s-iip,  both,  etc.),  architectural  perspectives  (designer 
cr('alivity)  atid  ob.iect-oriented  design. 

I  till  I'M;.  'Mpi'oris  hierarchleal  dec(.)m  posit  ion  with  ai'propriate  symax  const  laici  s 
■iwl  aaa-vy,  ■.ndiir.'.  al  ist  ractloti  levels.  Both  top-down  and  liotiom-np  ap- 

i■r''al•|l(^  arc  possilih'  and  siifijiorted.  Ol).iect-orienl ed  (lesigi)  is  one  ol'  the 

ni-; nci [  ic-.  ■  d'  i  he  '■\atcin  (language  cletiients  are  dt^'lgn  olijects). 

1.').  Is  your  sysLtttn  supported  by  rormal  syntax  X'.  stmitititics?  Dttseribe 
brieriy. 

V ^\'icm  includes  -'pecll'icat ion  laiigtiages  with  rormal  syntax  and  ^eniaii- 
Mc-..  max  c|irc|<c|-  (I’ai-'cr)  is  provided.  A  set  of  anal.vsis  lools  I'or 

'.ainaiinc  ilic  'cinaiiiicc  and  Tor  t  ratisrorming  repre'-'cnl  at  Ions  accordlmj,  to 

|■'dc^hl■r|  (v,  ulso  iiudllded. 


i; 


r; 


1().  Outline  typical  utilization  costs  for  your  systcun  (cost  of  acquiring,  usliiff, 
training.  *  maintaining  It). 


Siiuj;lf  \'AX  InstallaMon  $-12.5tX) 

1  W'l'k  ol'  trninlivj;  $11,250 

Viinunl  inalnttMiance/iii'iii'Mde  IVe  $  e.nOO 

'roial  $60,350 


ill  I'rtVct  a."^  of  f'cluaiary  l.  1987. 

^|■|■l■|a^l/^‘ll  ''iippoia  is  also  olTereil. 

17.  Indicates  th('  liostablllty  (mcjisure  of  decree  of  portability)  of  your 
system. 

\  '  la  liiuli  deyrre  of  port  ability  (one  of  the  objectives  oT  i  he  sysiem).  bl’Os 

i'  ilr.sily  a\ailalilt'  on  the  1)K(.'  \'.\X  famil.v  (73()-S()00):  HIM  l’(  X'l'.  A'l' 

■iiid  AT  '■oiupailbles  ('I'oshllia  3100):  IBM  malnrrame  (\'.\l/(  Ms  and 
Mk"  Intel  s()s()/s()-2S()  (IHMX):  siemens  7()00  (Bs2000).  I’onlipj,  of  the 

'leiii  .  'f  i/iher  macdilnes  is  availalUe  on  recinest.  Motorola  lisDOO  (I  XIX). 

I  MX  1.2  and  Bell  5  implementations  will  be  available  in  .Manh  of  It).s7. 

18.  Describe  liow  your  system  supports  Interdisciplinary  abstractions/represen¬ 
tations  (l.e.,  .systems  enslneerlrjR,  software  engineering,  hardware  engltieering). 

I  l’<)v  -.iipport^  ^vsicms  engineering,  l.e..  su|)porl  of  soriware  de\ clopiiieni  as 
as  lianluare  eonlTgiiration.  System  and  hardware  (Uwelopnieiii  is 
-npporicd  ill  an  environment  that  iiself  sui)poris  mnliiple  met  hodologieal 
ippi'' 'aches  :iii,|  s]i|| lilt ;iij(.()(|s  mapping  of  .soft  ware  and  hardw  are  eom-epis. 

19.  How  complete  is  the  methodology  -  do  Its  prirtciples  embody 

-A  develo[)ment  methodology  only 
-A  design  methodology  ofily 

()rogramming  methodology  only 
-A  ()roject  control  rnethcxlology 
-A  manageanent  methcxlology 
-,\ll  of  the  above 


All  ol  the  :tli<)\e  -  lePOS  Itself  represents  :i  full  design  and  developnient 
philosophy  with  Integrated  nieiluxkdotyy  sni)|)ort.  Additionally.  EPOS  is 
met  hod-independent  and  supports  x  arioiis  si  ainhual  niet  hodolog.v  a[>pr(>aehes 
such  :\.s  function-oriented.  devR-e-orlented.  event-oriented,  inodule-orlenteil.  data 
-'t met iire-orlent ed.  data  flow  oriented  and  method  neutral,  with  the  al>llH\’  to 
autoinatlealU'  >hlft  met  hodoksyle-^  durlii"  use. 


20.  Describe  how  your  system  supports  a  team  development  approach. 
(Number  of  stations/users). 

Project  plannln'4  of  team  stafUiuj;  .and  work  ti.'^sletnments.  as  well  as  respoiwi- 
l>lHt\'  analysis  is  provided.  d'hi'  work  of  the  team  members  Is  p(a-roiaued  In 
a  x^called  decent rtillzed  woi'ksi ai ion  cifncepi  with  a  c(‘niral  lu'ojec!  databasi' 
ton  malnl'raine  of  P(')  and  sc\ci-al  worksi .at Ions  for  the  de\’elo)ua’s. 

'[■'■am  members  c.an  work  on  dlljViaaii  i\|>es  of  machines,  with  data  exch.anve 
and  inte'.;ralloii  possible. 

21.  Describe  how  your  system  supports  design  trade-offs. 


Nka  dlrectl\'  supponed.  althoU'j;h  aiialysi.s  is  provided  to  an:il.v'/e  dlflVreni 
design  n[>i)ro:icht'S. 

22.  IndlcaUt  the  ratine  of  [iroblems  to  which  the  .system  can  be  tipiilled. 

IjPOS  has  beiai  "U(a'essfiiii\'  used  in  a  larne  numlxu'  of  dlflenaii  projects, 
iiieliidlti'j;  real  iim“  pi'ojeias  mid  eommereial  applications.  Projeet  s]/e  has 
r.anned  from  s)n;i||.  one/t  wo- person  pro.jiaas  lo  complex  efforts  invc'h  lnv 
se\'eral  aiu'ospaee  I'onipanies. 

Tarvet  laii'inayes  ina,\'  ranee  from  assianbler  to  Ada  and  oilna'  hlvh-le\e| 

la  nauaue^. 

The  ^ysiein  P  "uiied  for  all  phases  of  developiiKMii  aiid  a  i'an'j,e  of  oeiin 
-i/.es.  with  illleerated  ^ii]ip<,ia  foi-  c  ie\  clopmeui  and  mananeiinaii . 


2:i.  List  Itu'  tiariK's,  addresses,  and  phone  mimt)crs  oF  Hvo  (customers)  major 
users  oF  your  sys'.em. 

'I'hf  Id’Os  is  ill  use  oil  iiKijor  iirojeets  in  npproxlnuvtely  2-~>()  Instniln- 

tuMi"  \v.  M-ld-w  li U  .  1  'fi-s  inelndt': 

W'-'"!  Mlni-'ii'x  ■  >r  DciViisi-  .  (iruminnn  .Verospaee.  Midi  (Messer- 

srliniit  i-n('elk()\v-l-d('liin ).  I’hilUps.  |{oI)cim  Boseli.  Iinse  1().  :\n<l  ( 'oni  i':\\  es.  lo 
:i  I'l'W.  spi'i'iric  (•('iilnei  i n Foi'iiimi ion  is  neniInhU'  on  |•e(|nesr. 

101 ‘OS  i?ioi''roi?.ioNcios 


Ml'.  lOeklinrt  schunli 
Ministry  (jf  DclVn.^e  -  lioiin 
line  \'l<i 
l-jne|ci|sr  r. 

|)-.’.()()()  iionii  WIOs'l'  (.lOUMAN'i 
(ipi/yss  pji  .yd 

Dr.  l\nrl  Kcppin'i' 

Direi'ior.  'I'eclinie:il  IM;innin'.r  Dix, 

( )nt  r:i\y's  ( I  m  hi  I 
W'int erspurer  sir. 

I)-77C.S  .■'toelmeh  WlO.'^'r  (  .lOIDN 
1)77/77  s  Id  .y7 

Dr.  KDnk 

.Midi  I  .Mf'srl'^cll  mil  1  ! 

I  )i’P'  ■  I.InIO  1 1  1 

l)-<ini-j  Oiioiiruii  WIAT  (d■;DMA^^ 

I  >i'.  s,.jiriii  I  kc 
I’iliiip'  K:i."C| 

D-pt.  K1  A 

II 

i)-.;.yi)i)  w  i>'r  (.ioidma.xA’ 

I  )i'.  Mi'liii ' 

HIM  lOH  l.;ii..,rm<.r,'. 

■  1 1' ..  i  I :ii<- 1 1< ■  I  r- 1  r.  I 

D-7n:;i)  I?.  .■Mimj.-ii  \\  I  .s'p  (dd.’MWA 
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